Palo_Alto_Networks
PCNSE · Question #693
A network engineer troubleshoots a VPN Phase 2 mismatch and decides that PFS (Perfect Forward Secrecy) needs to be enabled. What action should the engineer take?
Sign in or unlock PCNSE to reveal the answer and full explanation for question #693. The question stem and answer options stay visible for context.
Submitted by haruto_sh· Apr 18, 2026Deploy and Configure
Question
A network engineer troubleshoots a VPN Phase 2 mismatch and decides that PFS (Perfect Forward Secrecy) needs to be enabled. What action should the engineer take?
Options
- AAdd an authentication algorithm in the IPSec Crypto profile.
- BEnable PFS under the IPSec Tunnel advanced options.
- CSelect the appropriate DH Group under the IPSec Crypto profile.
- DEnable PFS under the IKE gateway advanced options
Unlock PCNSE to see the answer
You've previewed enough free PCNSE questions. Unlock PCNSE for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#VPN#IPSec#PFS#Crypto Profile