To comply with new directives mandating the use of quantum-resistant cryptography for all data-in-transit a...

Basic Concept: Post-quantum VPN hardening in PAN-OS uses IKEv2 post-quantum options: PPK and KEM rounds configured in IKE-related profiles.

Why A and B are Correct: Configuring KEM rounds in an IKE Crypto profile and a 64+ character post-quantum PPK in an IKEv2 gateway meets the quantum-resistant requirement.

Why C is Wrong: Generate a post-quantum pre-shared key (PPK) and apply it within the IPSec tunnel configuration's advanced settings. relates to VPN configuration, but it does not address the specific PAN-OS requirement for selectors, tunnel interface functions, routing, or Security policy in this scenario.

Why D is Wrong: Enable GlobalProtect with quantum-resistant tunneling and apply the profile to the IKE Gateway. relates to VPN configuration, but it does not address the specific PAN-OS requirement for selectors, tunnel interface functions, routing, or Security policy in this scenario.