Palo Alto Networks PSE-DataCenter Exam - Topic 6 Question 17 Discussion

Actual exam question for Palo Alto Networks's PSE-DataCenter exam

Question #: 17
Topic #: 6

A company needs to preconfigure firewalls to be sent to remote sites with the least amount of reconfiguration. Once deployed, each firewall must establish secure tunnels back to multiple regional data centers to include the future regional data centers.

Which VPN configuration would adapt to changes when deployed to the future site?

APreconfigured GlobalProtect satellite

BPreconfigured GlobalProtect client

CPreconfigured IPsec tunnels

DPreconfigured PPTP Tunnels

Show Suggested Answer

Suggested Answer: A

by Vallie at Nov 19, 2025, 10:08 AM

Limited Time Offer

25%

Off

Get Premium PSE-DataCenter Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Brynn

1 day ago

Totally agree, A makes the most sense!

upvoted 0 times

...

Audria

6 days ago

I think A is the best choice for adaptability.

upvoted 0 times

...

Octavio

12 days ago

Preconfigured GlobalProtect? Sounds like a lot of extra setup. IPsec is the way to go.

upvoted 0 times

...

Cathrine

17 days ago

Option C is the clear winner. Can't go wrong with tried and true IPsec.

upvoted 0 times

...

Thurman

22 days ago

Haha, PPTP tunnels? What is this, the 90s? Definitely go with IPsec.

upvoted 0 times

...

Lauran

27 days ago

I agree, IPsec tunnels are the way to go. They're flexible and can handle future data center additions.

upvoted 0 times

...

Trevor

1 month ago

I feel like the GlobalProtect satellite option could be the best fit for future adaptability, but I can't quite remember the details on how it works.

upvoted 0 times

...

Chara

1 month ago

I practiced a similar question where PPTP was mentioned, but I recall that it's not as secure as IPsec or GlobalProtect.

upvoted 0 times

...

Ardella

1 month ago

I think preconfigured IPsec tunnels might be the right choice since they are generally more flexible, but I need to double-check the specifics.

upvoted 0 times

...

Cherelle

2 months ago

I remember studying about GlobalProtect and how it can adapt to changes, but I'm not sure if the satellite or client option is better for this scenario.

upvoted 0 times

...

Carlene

2 months ago

I'm not too familiar with the different VPN configurations, but I think I'll go with B. The question is asking for the most adaptable option, and the client-based approach seems like it would be the most flexible.

upvoted 0 times

...

Terrilyn

2 months ago

Option B sounds good to me. The GlobalProtect client can automatically connect to the appropriate gateways, so it should be able to handle any future data center changes without much reconfiguration.

upvoted 0 times

...

Casey

2 months ago

Option C seems like the best choice here. Preconfigured IPsec tunnels can adapt to changes in the network infrastructure.

upvoted 0 times

...

Nilsa

2 months ago

I think A is the best choice. GlobalProtect satellite adapts well.

upvoted 0 times

...

Vi

2 months ago

Hmm, I'm leaning towards C. Preconfigured IPsec tunnels. That way the tunnels can be easily established between the firewalls and the data centers, even as the network changes.

upvoted 0 times

...

Jesse

3 months ago

Wait, PPTP tunnels? Are we really considering that?

upvoted 0 times

...

Afton

3 months ago

C could work too, but A seems more flexible.

upvoted 0 times

...

Ria

3 months ago

I'm a bit confused by this question. Do we need to consider the future data centers when configuring the firewalls? I'm not sure which option would be best for that.

upvoted 0 times

...

Jesse

3 months ago

I think the answer is B. Preconfigured GlobalProtect client seems like the most flexible option that can adapt to changes in the future data centers.

upvoted 0 times

...