Exam PCNSE All QuestionsBrowse all questions from this exam
Question 75

Which three firewall states are valid? (Choose three.)

    Correct Answer: A, D, E

    The three valid firewall states are Active, Passive, and Suspended. Active is the state where the firewall actively processes data. Passive indicates that the firewall is not currently processing data but is ready to take over if the active firewall fails. Suspended is a state used in high-availability scenarios to force a firewall to stop processing data, often used to diagnose or manage failures. These states are commonly recognized in high-availability (HA) configurations and ensure seamless network security management.

Discussion
lol1000Options: ACD

ade https://docs.paloaltonetworks.com/pan-os/10-0/pan-os-admin/high-availability/ha-firewall-states.html

PacketFairy

A, C, E - One of the operations is to "suspend" a firewall. Often used to force an HA event. Also, if HA goes crazy and flaps back and forth, after 3 flaps the active firewall will go into "suspend" state. A hard failure is easier to diagnose than a constantly changing HA state. If HA is enabled, these are the states you will see on the dashboard. Everything else is a diagnostic mode or part of the boot sequence.

frodo1791

Pending is not a valid HA Cluster state, it makes options B and C incorrect. https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/high-availability/ha-firewall-states

CyberRasta

Why C? You said it yourself "after 3 flaps the active firewall will go into "suspend" state -----------> Suspended STATE

confusion

ADE, not ACE

zhawk7661Options: ADE

ANSWER: A,D,E

c001mudOptions: ADE

ade for sure

UFanatOptions: ADE

Active (A) Passive (D) Suspended (E) Non-Functional Initial Tentative https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-admin/high-availability/ha-firewall-states

thefiresaysOptions: ADE

ADE https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/high-availability/ha-firewall-states.html

lucabobanOptions: ADE

Correct answer is: ADE

confusionOptions: ADE

ADE 100%

evdwOptions: ADE

Correct answer: A, D, E

MarshpillowzOptions: ADE

A, D and E correct

DenskyDenOptions: ADE

ADE. 100 percent.

Kjohnsting

Suspended is when you force a fw to passive.

TAKUM1yOptions: ADE

https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/high-availability/ha-firewall-states#id2ee5562a-9bc8-42b6-9c77-2cc496a112fc