Palo_Alto_NetworksPalo_Alto_Networks
NGFW-ENGINEER · Question #3
NGFW-ENGINEER Question #3: Real Exam Question with Answer & Explanation
Sign in or unlock NGFW-ENGINEER to reveal the answer and full explanation for question #3. The question stem and answer options stay visible for context.
Implementing and Troubleshooting VPNs
Question
After an engineer configures an IPSec tunnel with a Cisco ASA, the Palo Alto Networks firewall generates system messages reporting the tunnel is failing to establish. Which of the following actions will resolve this issue?
Options
- AEnsure that an active static or dynamic route exists for the VPN peer with next hop as the tunnel
- BConfigure the Proxy IDs to match the Cisco ASA configuration.
- CCheck that IPSec is enabled in the management profile on the external interface.
- DValidate the tunnel interface VLAN against the peer's configuration.
Unlock NGFW-ENGINEER to see the answer
You've previewed enough free NGFW-ENGINEER questions. Unlock NGFW-ENGINEER for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#IPSec VPN#Proxy ID#Tunnel Troubleshooting#Cross-Vendor VPN