Palo Alto Networks SSE Engineer — Question 43

An engineer has configured a new Remote Networks connection using BGP for route advertisements. The IPSec tunnel has been established, but the BGP peer is not up.
Which two elements must the engineer validate to solve the issue? (Choose two.)

Answer options

• A. Secret
• B. MRAI Timers
• C. Peer AS Number
• D. Advertise Default Route Checkbox

Correct answer: A, C

Explanation

The correct options are A and C. The 'Secret' must be validated to ensure the authentication is correct between BGP peers, while the 'Peer AS Number' must match for the BGP session to establish. Options B and D are not critical for establishing the BGP session; MRAI timers affect route propagation and the Advertise Default Route checkbox does not impact the peer connection directly.