Palo Alto Networks Certified Network Security Engineer (PCNSE) — Question 32

A company needs to preconfigure firewalls to be sent to remote sites with the least amount of preconfiguration. Once deployed, each firewall must establish secure tunnels back to multiple regional data centers to include the future regional data centers.
Which VPN configuration would adapt to changes when deployed to the future site?

Answer options

Correct answer: A

Explanation

The correct answer is A, as a Preconfigured GlobalProtect satellite can adapt to changes and establish secure connections to new data centers seamlessly. Options B, C, and D are less flexible; the GlobalProtect client is designed for end-user devices rather than firewalls, IPsec tunnels require manual configuration for each new site, and PPTP is outdated with known vulnerabilities, making it unsuitable for secure communications.