Palo Alto Networks Certified Network Security Engineer (PCNSE) — Question 449

An administrator configures two VPN tunnels to provide for failover and uninterrupted VPN service.

What should an administrator configure to enable automatic failover to the backup tunnel?

Answer options

• A. Replay Protection
• B. Zone Protection
• C. Tunnel Monitor
• D. Passive Mode

Correct answer: C

Explanation

The correct answer is C, Tunnel Monitor, which is specifically designed to monitor the status of VPN tunnels and facilitate automatic failover. Options A and B, Replay Protection and Zone Protection, are unrelated to tunnel monitoring and do not provide failover capabilities, while D, Passive Mode, does not actively manage tunnel status or failover processes.