Exam PCNSE All QuestionsBrowse all questions from this exam
Go to Exam
Question 600

An engineer is monitoring an active/passive high availability (HA) firewall pair.

Which HA firewall state describes the firewall that is currently processing traffic?

    Correct Answer: B

    In an active/passive high availability (HA) firewall pair, the firewall that is currently processing traffic is referred to as 'Active.' The 'Active-primary' and 'Active-secondary' states are used in an active/active configuration, not an active/passive configuration. The 'Initial' state is generally used to describe a state during initial boot-up or before the firewall takes on a specific active or standby role. Therefore, the correct answer is 'Active.'

Discussion
hcirOption: B

B. Active-primary is for active-active HA

Cro13Option: B

B because "Active-primary" and "Active-secondary" is for "Active/Active" mode

sabahetaOption: B

My bad from previous comment, the correct answer for active/passive is "B. Active" https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/high-availability/ha-firewall-states

sabahetaOption: A

Same question as #566, the correct answer is A. Active-Primary https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/high-availability/ha-firewall-states

noloxOption: B

For A/P should be "Active"

villinOption: A

A. "Active" is only for A/P configurations. Active-primary and Active-secondary are for A/A configurations. "Active-Primary: In an active/active configuration, state of the firewall that connects to User-ID agents, runs DHCP server and DHCP relay, and matches NAT and PBF rules with the Device ID of the active-primary firewall. A firewall in this state can own sessions and set up sessions." https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-admin/high-availability/ha-firewall-states