nerdexam
Palo_Alto_NetworksPalo_Alto_Networks

PCNSE · Question #774

PCNSE Question #774: Real Exam Question with Answer & Explanation

Sign in or unlock PCNSE to reveal the answer and full explanation for question #774. The question stem and answer options stay visible for context.

Submitted by rania.sa· Apr 18, 2026Configuration Troubleshooting

Question

A firewall administrator is configuring an IPSec tunnel between Site A and Site B. The Site A firewall uses a DHCP assigned address on the outside interface of the firewall, and the Site B firewall uses a static IP address assigned to the outside interface of the firewall. However, the use of dynamic peering is not working. Refer to the two sets of configuration settings provided. Which two changes will allow the configurations to work? (Choose two.) Site A configuration: Site B configuration:

Options

  • AMatch IKE version on both firewalls.
  • BConfigure Local Identification on Site B firewall.
  • CEnable NAT Traversal on Site B firewall.
  • DDisable passive mode on Site A firewall.

Unlock PCNSE to see the answer

You've previewed enough free PCNSE questions. Unlock PCNSE for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Topics

#IPSec VPN#Dynamic Peers#IKE Configuration#VPN Troubleshooting
Full PCNSE PracticeBrowse All PCNSE Questions