nerdexam
Palo_Alto_Networks

PCNSE · Question #855

Which configuration change will improve network reliability and ensure minimal disruption during tunnel failures?

The correct answer is B. Set up a backup tunnel and reduce the tunnel monitoring interval and threshold to detect failures. For IPsec VPN reliability, Option B enhances failover speed by adding a backup tunnel and tuning tunnel monitoring. Reducing the interval (e.g., to 2 seconds) and threshold (e.g., to 3 retries) ensures quick detection and failover to the backup tunnel, minimizing disruption.

Submitted by olafpl· Apr 18, 2026Deploy and Configure

Question

Which configuration change will improve network reliability and ensure minimal disruption during tunnel failures?

Options

  • ASet up high availability (HA) and increase the IPsec rekey interval to reduce the likelihood of
  • BSet up a backup tunnel and reduce the tunnel monitoring interval and threshold to detect failures
  • CSet up high availability (HA) and disable tunnel monitoring to prevent unnecessary failovers due
  • DSet up a backup tunnel and change the tunnel monitoring profile from "Wait Recover" to "Fail

How the community answered

(25 responses)
  • A
    8% (2)
  • B
    84% (21)
  • C
    4% (1)
  • D
    4% (1)

Explanation

For IPsec VPN reliability, Option B enhances failover speed by adding a backup tunnel and tuning tunnel monitoring. Reducing the interval (e.g., to 2 seconds) and threshold (e.g., to 3 retries) ensures quick detection and failover to the backup tunnel, minimizing disruption.

Topics

#IPsec VPN#Tunnel Monitoring#Failover#Network Reliability

Community Discussion

No community discussion yet for this question.

Full PCNSE Practice