PCNSE High Availability and Redundancy 3

Question 1

Which HA state indicates that a firewall is actively passing traffic and enforcing policy?

Accepted Answer

Active

Answer

Initial

Answer

Passive

Answer

Suspended

Question 2

What does the 'HA Suspended' state mean on a Palo Alto firewall?

Accepted Answer

The firewall has been administratively removed from the HA pair and will not take over

Answer

The firewall is in the process of synchronizing with its peer

Answer

The firewall has detected a hardware failure

Answer

The firewall is waiting for a configuration commit

Question 3

In a Palo Alto HA pair, which sessions are synchronized to the Passive firewall by default?

Accepted Answer

All established sessions including TCP, UDP, and ICMP

Answer

Only HTTPS sessions

Answer

Only management sessions

Answer

No sessions are synchronized unless manually configured

Question 4

What minimum HA timer setting results in the fastest failover detection but highest CPU overhead?

Accepted Answer

Aggressive

Answer

Recommended

Answer

Conservative

Answer

Custom with 60-second intervals

Question 5

Which Palo Alto feature allows a virtual IP address to move between HA peers during failover, ensuring uninterrupted connectivity?

Accepted Answer

Floating IP

Answer

Loopback Interface

Answer

ECMP

Answer

Dynamic Routing Redistribution

Question 6

In Palo Alto HA, which log type records failover events and HA state transitions?

Accepted Answer

System Logs

Answer

Traffic Logs

Answer

Threat Logs

Answer

Authentication Logs