An engineer notices that the tunnel monitoring has been failing for a day and the VPN should have failed over to a backup path. What part of the network profile configuration should the engineer verif

The correct answer is C. Action. The tunnel monitoring profile's 'Action' setting determines what the firewall does when monitoring fails. The two options are 'wait-recover' (keep the tunnel up and wait for it to recover) and 'fail-over' (trigger a failover to a backup path). If monitoring has been failing for a

Submitted by ricky.ec· Apr 18, 2026Configuration Troubleshooting

Question

An engineer notices that the tunnel monitoring has been failing for a day and the VPN should have failed over to a backup path. What part of the network profile configuration should the engineer verify?

Options

ADestination IP
BThreshold
CAction
DInterval

How the community answered

(37 responses)

A
8% (3)
B
14% (5)
C
76% (28)
D
3% (1)

Explanation

The tunnel monitoring profile's 'Action' setting determines what the firewall does when monitoring fails. The two options are 'wait-recover' (keep the tunnel up and wait for it to recover) and 'fail-over' (trigger a failover to a backup path). If monitoring has been failing for a day but no failover occurred, the Action is almost certainly set to 'wait-recover' instead of 'fail-over'. The Threshold and Interval settings affect when failure is declared, not what happens after it is declared.

Topics

#VPN#Tunnel Monitoring#Failover#Configuration Troubleshooting

Community Discussion

No community discussion yet for this question.

Full PCNSE Practice