Exam PCNSE All QuestionsBrowse all questions from this exam
Question 367

An administrator has configured a pair of firewalls using high availability in Active/Passive mode.

Link and Path Monitoring is enabled with the Failure Condition set to `any`.

There is one link group configured containing member interfaces ethernet1/1 and ethernet1/2 with a Group Failure Condition set to `all`.

Which HA state will the Active firewall go into if ethernet1/1 link goes down due to a failure?

    Correct Answer: A

    Since the administrator configured the Failure Condition to `any`, and the Group Failure Condition is set to `all`, the firewall will only failover to the passive state if all member interfaces in the link group are down. In this scenario, only ethernet1/1 has gone down while ethernet1/2 is still up, so the active firewall will stay in the Active state.

Discussion
AlenOption: A

question is poorly written. it mentions "which HA state will the active firewall go into". The state will remain the same. it wont change

guilhermeandradeOption: A

A. Active is correct

confusionOption: A

A Path group condition is all, only 1 is down, so no changes shall be trigered.

MarshpillowzOption: A

A is correct

duckduckgoooOption: A

A https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClG7CAK