PCNSE High Availability and Redundancy

Question 1

In Palo Alto Networks High Availability, what is the role of the Active firewall?

Accepted Answer

It actively processes all network traffic and enforces security policy

Answer

In an Active/Passive HA pair, the Active firewall processes all live network traffic while the Passive firewall stands by in a synchronized state.

Question 2

Which HA link is used to synchronize session tables and runtime data between HA peers?

Accepted Answer

HA2 (Data Link)

Answer

The HA2 Data Link synchronizes session state, forwarding tables, and IPsec security associations between the Active and Passive firewalls.

Question 3

What is the purpose of the HA1 Control Link in a Palo Alto HA pair?

Accepted Answer

To exchange heartbeats and synchronize configuration between peers

Answer

The HA1 Control Link carries heartbeat packets, hello messages, and configuration synchronization between HA peers.

Question 4

In Active/Active HA mode, how is traffic distributed between the two firewalls?

Accepted Answer

Both firewalls simultaneously process traffic, typically with a load balancer

Answer

In Active/Active HA, both firewalls process traffic concurrently, usually with an upstream load balancer or ECMP distributing sessions between them.

Question 5

What condition triggers a failover in an Active/Passive HA pair?

Accepted Answer

The Active firewall fails a link monitoring or heartbeat check

Answer

Failover is triggered when the Active firewall fails link monitoring checks or heartbeats stop, causing the Passive firewall to transition to Active.

PCNSE Exam Practice Test