Paloalto Networks Palo Alto Networks Certified Security Engineer (PCNSE) PAN-OS 11.0 PCNSE Question # 101 Topic 11 Discussion

Paloalto Networks Palo Alto Networks Certified Security Engineer (PCNSE) PAN-OS 11.0 PCNSE Question # 101 Topic 11 Discussion

PCNSE Exam Topic 11 Question 101 Discussion:
Question #: 101
Topic #: 11

A network engineer troubleshoots a VPN Phase 2 mismatch and decides that PFS (Perfect Forward Secrecy) needs to be enabled. What action should the engineer take?


A.

Enable PFS under the IKE gateway advanced options.


B.

Enable PFS under the IPSec Tunnel advanced options.


C.

Add an authentication algorithm in the IPSec Crypto profile.


D.

Select the appropriate DH Group under the IPSec Crypto profile.


Get Premium PCNSE Questions

Contribute your Thoughts:


Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.