Exam PCNSE All QuestionsBrowse all questions from this exam
Question 452

What are two explanations for this type of issue? (Choose two.)

    Correct Answer: A, D

    The two explanations for this type of issue are that either the management or a data-plane interface is used as HA1-backup and the Backup Peer HA1 IP Address was not configured when the commit was issued. These configurations can lead to a failure in the commit process due to improper HA settings.

Discussion
KaspinasOptions: AD

Answers: AD Cause The issue is seen when the HA1-backup is configured with either management (MGT) or an in-band interface. The "Backup Peer HA1 IP Address" is not configured : https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u0000008UmPCAU&lang=en_US%E2%80%A9

djedeenOption: D

A&D per Kaspinas' link, please fix the question to have two answers as text states.

dgonzOption: A

A and D

mohr22Options: AD

A & D Answers:

evilCorpBot7494Option: A

A & D are the correct answers

MarshpillowzOptions: AD

A and D correct

Betty2022Option: D

A & D https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u0000008UmPCAU&lang=en_US%E2%80%A9 Cause: The issue is seen when the HA1-backup is configured with either management (MGT) or an in-band interface. The "Backup Peer HA1 IP Address" is not configured :

lildevilOption: D

D is the only accurate option here. You can absolutely use an ethernet port for your backup HA1, in fact only the 7000 series requires you use the on board HA1-A as the primary. https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-admin/high-availability/ha-concepts/ha-links-and-backup-links/ha-ports-on-the-pa-7000-series-firewall#id83d9ad84-d855-43b0-b9e5-bf1332cbaaaf

skullomania

For new devices as PA-410 is not longer possible to configure an ethernet port for backup HA1, but you have to configure the HA1-B port for that porpuse. Answer is D anyway.