PCNSE High Availability and Redundancy 2

Question 1

Which HA configuration setting determines which firewall becomes Active when both peers are healthy and preemption is enabled?

Accepted Answer

HA Device Priority

Answer

Device Serial Number

Answer

HA Group ID

Answer

Management IP Address

Question 2

What is the recommended best practice for the HA1 Control Link to ensure high reliability?

Accepted Answer

Configure an HA1 backup link on a separate physical interface

Answer

Use the management interface as the only HA1 link

Answer

Use a wireless interface for HA1

Answer

Share the HA1 link with data traffic

Question 3

In Palo Alto HA, what is the 'split brain' condition?

Accepted Answer

Both firewalls believing they are Active at the same time

Answer

Both firewalls simultaneously processing the same session

Answer

The HA2 link failing during a commit

Answer

A firewall entering a suspended HA state

Question 4

Which HA feature allows a Palo Alto firewall to monitor an upstream router and trigger failover if the path fails?

Accepted Answer

Path Monitoring

Answer

Link Monitoring

Answer

BFD

Answer

OSPF Graceful Restart

Question 5

What is the function of the HA3 link in an Active/Active HA deployment?

Accepted Answer

To forward packets between peers when a session is owned by one firewall but traffic arrives at the other

Answer

To carry heartbeat messages

Answer

To synchronize configuration only

Answer

To connect to the Panorama management server

Question 6

When performing a software upgrade on an HA pair, what is the recommended procedure to avoid downtime?

Accepted Answer

Upgrade the Passive firewall first, then manually fail over, then upgrade the original Active

Answer

Upgrade both firewalls simultaneously during a maintenance window

Answer

Disable HA before upgrading either device

Answer

Upgrade the Active firewall first to test the new software