Palo Alto Networks Certified Network Security Engineer (PCNSE) — Question 437

An engineer notices that the tunnel monitoring has been failing for a day and the VPN should have failed over to a backup path.

What part of the network profile configuration should the engineer verify?

Answer options

• A. Destination IP
• B. Threshold
• C. Action
• D. Interval

Correct answer: C

Explanation

The engineer should check the Action setting in the network profile configuration because it dictates what occurs when a failure is detected. If the Action is not properly configured, the VPN will not failover to the backup path. The other options, while important, do not directly influence the failover action of the VPN.