PCNSE High Availability and Redundancy

Question 1

In Palo Alto Networks High Availability, what is the role of the Active firewall?

Accepted Answer

It actively processes all network traffic and enforces security policy

Answer

It processes only management traffic

Answer

It synchronizes configuration to the passive peer

Answer

It monitors the passive peer health only

Question 2

Which HA link is used to synchronize session tables and runtime data between HA peers?

Accepted Answer

HA2 (Data Link)

Answer

HA1 (Control Link)

Answer

HA3 (Packet Forwarding Link)

Answer

Management Interface

Question 3

What is the purpose of the HA1 Control Link in a Palo Alto HA pair?

Accepted Answer

To exchange heartbeats and synchronize configuration between peers

Answer

To forward user traffic during failover

Answer

To synchronize session tables

Answer

To pass decrypted traffic between peers

Question 4

In Active/Active HA mode, how is traffic distributed between the two firewalls?

Accepted Answer

Both firewalls simultaneously process traffic, typically with a load balancer

Answer

Only one firewall processes traffic at a time

Answer

Traffic is split by protocol type

Answer

Each firewall handles only its own management subnet

Question 5

What condition triggers a failover in an Active/Passive HA pair?

Accepted Answer

The Active firewall fails a link monitoring or heartbeat check

Answer

CPU utilization exceeding 50%

Answer

A new policy is committed on the Active firewall

Answer

The Passive firewall receives more traffic

Question 6

What does 'preemption' mean in the context of Palo Alto HA?

Accepted Answer

The higher-priority firewall automatically reclaiming the Active role after recovery

Answer

The passive firewall blocking all traffic during sync

Answer

Manually swapping Active and Passive roles

Answer

Disabling HA temporarily for maintenance