exam questions

Exam NGFW-Engineer All Questions

View all questions & answers for the NGFW-Engineer exam

Exam NGFW-Engineer topic 1 question 13 discussion

Actual exam question from Palo Alto Networks's NGFW-Engineer
Question #: 13
Topic #: 1
[All NGFW-Engineer Questions]

After an engineer configures an IPSec tunnel with a Cisco ASA, the Palo Alto Networks firewall generates system messages reporting the tunnel is failing to establish.
Which of the following actions will resolve this issue?

  • A. Ensure that an active static or dynamic route exists for the VPN peer with next hop as the tunnel interface.
  • B. Configure the Proxy IDs to match the Cisco ASA configuration.
  • C. Check that IPSec is enabled in the management profile on the external interface.
  • D. Validate the tunnel interface VLAN against the peer’s configuration.
Show Suggested Answer Hide Answer
Suggested Answer: B 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Seidor_Analytics
2 weeks, 3 days ago
Selected Answer: B
I’m going with B because the others are clearly non-starters.
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...