PCNSE High Availability and Redundancy 2

Question 1

Which HA configuration setting determines which firewall becomes Active when both peers are healthy and preemption is enabled?

Accepted Answer

HA Device Priority

Answer

HA Device Priority (lower numerical value = higher priority) determines which firewall takes the Active role when both devices are healthy.

Question 2

What is the recommended best practice for the HA1 Control Link to ensure high reliability?

Accepted Answer

Configure an HA1 backup link on a separate physical interface

Answer

Configuring a backup HA1 link on a separate physical interface ensures control link redundancy in case the primary HA1 path fails.

Question 3

In Palo Alto HA, what is the 'split brain' condition?

Accepted Answer

Both firewalls believing they are Active at the same time

Answer

Split brain occurs when both HA peers simultaneously assume the Active role, typically due to a loss of the HA1 control link, causing traffic disruption.

Question 4

Which HA feature allows a Palo Alto firewall to monitor an upstream router and trigger failover if the path fails?

Accepted Answer

Path Monitoring

Answer

Path Monitoring sends ICMP probes to specified IP addresses and triggers HA failover if the monitored path becomes unreachable.

Question 5

What is the function of the HA3 link in an Active/Active HA deployment?

Accepted Answer

To forward packets between peers when a session is owned by one firewall but traffic arrives at the other

Answer

The HA3 link in Active/Active mode forwards packets between peers when asymmetric routing sends return traffic to the firewall that did not originate the session.

PCNSE Exam Practice Test

PCNSE Exam Practice Test

PCNSE High Availability and Redundancy 2