PCNSA PCNSA VPN and Tunnel Configuration

Question 1

Which Palo Alto Networks VPN technology is used to provide secure remote access for end users connecting from laptops or mobile devices?

Accepted Answer

GlobalProtect

Answer

IPsec Site-to-Site VPN

Answer

Layer 2 VPN

Answer

GRE Tunnel

Question 2

What is the role of the GlobalProtect Portal in a Palo Alto Networks remote access deployment?

Accepted Answer

Authenticates users and distributes agent configuration to connecting clients

Answer

Terminates VPN tunnels from remote clients

Answer

Provides DNS resolution for internal resources

Answer

Manages IPsec Phase 1 negotiations

Question 3

Which IKE phase is responsible for establishing a secure, authenticated channel used to negotiate IPsec security associations?

Accepted Answer

IKE Phase 1

Answer

IKE Phase 2

Answer

IKE Phase 3

Answer

IKE Phase 0

Question 4

In a Palo Alto Networks IPsec VPN configuration, what is an 'IKE Gateway'?

Accepted Answer

A configuration object defining the peer VPN device and IKE parameters for Phase 1

Answer

The firewall interface facing the internet

Answer

The tunnel interface carrying encrypted traffic

Answer

The routing protocol used over the VPN tunnel

Question 5

Which interface type must be created on a Palo Alto Networks firewall to carry IPsec tunnel traffic?

Accepted Answer

Tunnel interface

Answer

Loopback interface

Answer

VLAN interface

Answer

Subinterface

Question 6

What does 'IKEv2' improve over 'IKEv1' in Palo Alto Networks IPsec VPN deployments?

Accepted Answer

IKEv2 reduces the number of exchanges needed and adds built-in NAT traversal and EAP support

Answer

IKEv2 requires more messages to establish a tunnel

Answer

IKEv2 only works with pre-shared keys

Answer

IKEv2 eliminates the need for a tunnel interface