nerdexam
Palo_Alto_Networks

PCNSE · Question #864

How is Perfect Forward Secrecy (PFS) enabled when troubleshooting a VPN Phase 2 mismatch?

Sign in or unlock PCNSE to reveal the answer and full explanation for question #864. The question stem and answer options stay visible for context.

Submitted by takeshi77· Apr 18, 2026Configuration Troubleshooting

Question

How is Perfect Forward Secrecy (PFS) enabled when troubleshooting a VPN Phase 2 mismatch?

Options

  • AEnable PFS under the IKE Gateway advanced options
  • BEnable PFS under the IPsec Tunnel advanced options
  • CSelect the appropriate DH Group under the IPsec Crypto profile
  • DAdd an authentication algorithm in the IPsec Crypto profile

Unlock PCNSE to see the answer

You've previewed enough free PCNSE questions. Unlock PCNSE for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Topics

#VPN#IPsec#Perfect Forward Secrecy (PFS)#IKE Gateway
Full PCNSE Practice