PCNSE Exam QuestionsBrowse all questions from this exam

PCNSE Exam - Question 524


An engineer is reviewing the following high availability (HA) settings to understand a recent HA failover event.

Which timer determines the frequency between packets sent to verify that the HA functionality on the other HA firewall is operational?

Show Answer
Correct Answer: A

The timer that determines the frequency between packets sent to verify that the HA functionality on the other HA firewall is operational is the Hello Interval. According to the documentation, the Hello Interval is the interval in milliseconds between hello packets that are sent to ensure the HA functionality of the other firewall is operational. This is different from the Heartbeat Interval, which is used primarily for connectivity verification through ICMP pings. Therefore, the correct option is Hello Interval.

Discussion

20 comments
Sign in to comment
villinOption: A
Apr 23, 2024

basically, heartbeat is for connectivity and hello is for functionality

brian7857ffs45
Nov 29, 2023

This question was on the exam.. Nov 2023

MostafaNawarOption: A
Apr 13, 2024

A, please check this https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/high-availability/ha-concepts/ha-timers

mercysayno765Option: A
Jun 11, 2023

A. Hello Interval (ms) Interval in milliseconds between hello packets that are sent to verify that the HA functionality on the other firewall is operational. The range is 8000-60000 ms with a default of 8000 ms for all platforms. https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/high-availability/ha-concepts/ha-timers

PaloSteve
Jul 26, 2023

https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/high-availability/ha-concepts/failover "Heartbeat Polling and Hello messages- The firewalls use hello message and heartbeats to verify that the peer firewall is responsive and operational. Hello messages are sent from one peer to the other at the configured Hello Interval to verify the state of the firewall. The heartbeat is an ICMP ping to the HA peer over the control link, and the peer responds to the ping to establish that the firewalls are connected and responsive. By default, the interval for the heartbeat is 1000 milliseconds. A ping is sent every 1000 milliseconds and if there are three consecutive heartbeat losses, a failovers occurs. For details on the HA timers that trigger a failover, see HA Timers." Since the failover here talks about pings, and Heartbeat is the one that does pings, I'm leaning towards Answer C.

B_B_19Option: A
Jul 31, 2023

Hello Interval - interval in milliseconds between hello packets that are sent to verify that the HA functionality on the other firewall is operational (range is 8,000 to 60,000; default is 8,000). from the 11.0 guide: https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-admin/high-availability/ha-concepts/ha-timers#idcc1faa1c-5cd8-4830-90da-93e8effab23d

MetgatzOption: A
Dec 28, 2023

The hello interval es the interchange of HA information hello packets. Heartbeat Interval a a ICMP/Ping test.

procheeseburger
Jun 14, 2023

A is the way

[Removed]
Jun 16, 2023

The question is a bit tricky but in this case option C is correct. https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClUcCAK

[Removed]Option: A
Jun 16, 2023

A typo, option A is correct.

Knowledge33Option: A
Jun 17, 2023

Difference between Heartbeat and Hello: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClUcCAK

sov4Option: A
Jul 30, 2023

A. Keepalive is a ping. Heartbeat is a message sent to the other firewall to see if it's still functioning.

dorf05Option: C
Dec 1, 2023

I will go for C.... because of the key "on the other HA firewall". While Hello is to each other.

Andromeda1800Option: A
Dec 10, 2023

It's A. It is visible clear in the shared links.

Andromeda1800Option: A
Dec 14, 2023

A is correct.

MarshpillowzOption: A
Feb 4, 2024

A is correct

[Removed]Option: A
Jun 27, 2024

Why are there so many wrong solutions given as the correct answer?

Moadil_001Option: C
Sep 5, 2024

Its definitely "C" The question asks if other HA firewall is "operational", the Hello only checks for availability that is related to the initial detection of the peer’s presence, simply like a ping, but heartbeats are used to monitor the status and health of the peer firewall, ensuring that it is operational and synchronized.

Style07Option: A
Sep 25, 2024

Hello Interval (ms) Interval in milliseconds between hello packets that are sent to verify that the HA functionality on the other firewall is operational (range is 8,000 to 60,000; default is 8,000).

af67d32Option: A
Feb 12, 2025

A without a doubt when it come to verifying the functionnality. Heartbeat just sends icmp echo request