Palo Alto Networks Certified Network Security Engineer (PCNSE) — Question 215

A company needs to preconfigure firewalls to be sent to remote sites with the least amount of preconfiguration. Once deployed, each firewall must establish secure tunnels back to multiple regional data centers to include the future regional data centers.
Which VPN preconfigured configuration would adapt to changes when deployed to the future site?

Answer options

• A. GlobalProtect client
• B. PPTP tunnels
• C. IPsec tunnels using IKEv2
• D. GlobalProtect satellite

Correct answer: D

Explanation

The GlobalProtect satellite option is designed to automatically adapt to new regional data centers, making it suitable for future changes. In contrast, PPTP and IKEv2 tunnels may require more manual configuration to accommodate new sites, and the GlobalProtect client focuses on individual device connections rather than site-to-site adaptability.