A network administrator configured a site-to-site VPN tunnel where the peer device will act as initiator None of the peer addresses are known
What can the administrator configure to establish the VPN connection?
A . Set up certificate authentication.
B . Use the Dynamic IP address type.
C . Enable Passive Mode
D . Configure the peer address as an FQDN.
Answer: B
Explanation:
When the peer device will act as the initiator and none of the peer addresses are known, the administrator can enable Passive Mode to establish the VPN connection. Passive Mode tells the firewall to wait for the peer device to initiate the VPN connection. The other options are incorrect. Option A, setting up certificate authentication, would require the administrator to know the peer device’s certificate. Option C, using the Dynamic IP address type, would require the administrator to know the peer device’s dynamic IP address. Option D, configuring the peer address as an FQDN, would require the administrator to know the peer device’s fully qualified domain name.
https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClIGCA0
Latest PCNSE Dumps Valid Version with 280 Q&As
Latest And Valid Q&A | Instant Download | Once Fail, Full Refund