In PAN-OS, where do you configure the use of quantum-resistant algorithms for an IPSec tunnel?

In the tunnel interface settings

If a GRE tunnel is up but traffic is not passing through it, which tool would you use on a Palo Alto firewall to capture and inspect the encapsulated packets?

The 'test security-policy-match' command

Packet capture (PCAP) on the tunnel interface

The 'show system state' command

An organization is configuring a new IPSec tunnel and wants to use quantum-resistant algorithms. The engineer has created a new IKE crypto profile and selected the appropriate post-quantum algorithm. What else must be configured to ensure the tunnel uses this profile?

Set the IKE gateway version to IKEv2 and enable NAT traversal.

Enable the 'Quantum Resistant' checkbox in the tunnel interface settings.

Configure the tunnel to use a pre-shared key with a minimum length of 32 characters.

Assign the crypto profile to the IKE gateway and the IPSec crypto profile to the tunnel.

When configuring a quantum-resistant crypto profile for IPSec on PAN-OS, which setting must be changed from the default to use a post-quantum algorithm?

The Key Exchange algorithm in the IKE crypto profile

The ESP encryption algorithm in the IPSec crypto profile

The authentication method in the IKE gateway

Which statement accurately describes the structure of a GRE packet?

A GRE header is added between the original IP header and the payload

The original IP header is replaced with a GRE header

GRE adds a new IP header but no additional header fields

GRE encrypts the original packet and adds a new header

Palo Alto NetworksCertified Next-Generation Firewall Engineer

Domain 1Objective 6

1.6 Configure Tunnels NEXT-GENERATION-FIREWALL-ENGINEER Practice Questions (Page 3)

Part of the PAN-OS Networking Configuration domain, which accounts for 40% of the NEXT-GENERATION-FIREWALL-ENGINEER exam.

24questions here

5free pages

8concepts

40%of the exam

Questions 11–15

11foundation · easy
In PAN-OS, where do you configure the use of quantum-resistant algorithms for an IPSec tunnel?
Select an answer first
12foundation · easy
If a GRE tunnel is up but traffic is not passing through it, which tool would you use on a Palo Alto firewall to capture and inspect the encapsulated packets?
Select an answer first
13application · medium
An organization is configuring a new IPSec tunnel and wants to use quantum-resistant algorithms. The engineer has created a new IKE crypto profile and selected the appropriate post-quantum algorithm. What else must be configured to ensure the tunnel uses this profile?
Select an answer first
14foundation · easy
When configuring a quantum-resistant crypto profile for IPSec on PAN-OS, which setting must be changed from the default to use a post-quantum algorithm?
Select an answer first
15foundation · easy
Which statement accurately describes the structure of a GRE packet?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NEXT-GENERATION-FIREWALL-ENGINEER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Palo Alto Networks. “NEXT-GENERATION-FIREWALL-ENGINEER” is a trademark of its owner, used for identification only.