What happens when an A/P firewall pair synchronizes IPsec tunnel security associations (SAs)?

A network security engineer needs to ensure that virtual systems can communicate with one another within a Palo Alto Networks firewall. Separate virtual routers (VRs) are created for each virtual system.
In addition to confirming security policies, which three configuration details should the engineer focus on to ensure communication between virtual systems? (Choose three.)

What is the dependency for users to access services that require authentication?

A company with already deployed Palo Alto firewalls has purchased their first Panorama server.
The security team has already configured all firewalls with the Panorama IP address and added all the firewall serial numbers in Panorama. What are the next steps to migrate configuration from the firewalls to Panorama?

Which three multi-factor authentication methods can be used to authenticate access to the firewall? (Choose three.)