Exam PCNSE All QuestionsBrowse all questions from this exam
Go to Exam
Question 63

Which three options are supported in HA Lite? (Choose three.)

    Correct Answer: B, C, D

    In HA Lite, the supported options are Active/passive deployment, Synchronization of IPsec security associations, and Configuration synchronization. HA Lite provides a mechanism to synchronize configuration settings and some run-time data like IPsec security associations but does not support session synchronization. Therefore, the right options are Active/passive deployment, Synchronization of IPsec security associations, and Configuration synchronization.

Discussion
Silent_SanctuaryOptions: BCD

Correct Answer B C & D HA Lite is an active/passive deployment that provides configuration synchronization and some run-time data synchronization such as IPsec security associations. It does not support session synchronization (HA2), and therefore does not offer stateful failover.

eyelasers1

Note that HA Lite is not present in PAN 10: Compare 8.1 and 10 docs here: https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-admin/high-availability/ha-concepts/ha-modes.html

duckduckgooo

New link https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClUzCAK

mmedOptions: BCD

BCD HA-Lite offers the following capabilities: A/P High Availability without session sync Failover of IPSec Tunnels (sessions must be re-established) DHCP Lease information PPPoE lease information Configuration sync Layer 3 forwarding tables

cybermateOptions: BCD

BCD are the correct answers The PA-200 (a discontinued model) firewall supports HA Lite only. HA Lite is an active/passive deployment that provides configuration synchronization and some run-time data synchronization such as IPsec security associations. It does not support session synchronization (HA2), and therefore does not offer stateful failover.

lol1000Options: BCD

b, c, d https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClUzCAK

MarshpillowzOptions: BCD

B, C and D correct

SarbiOptions: ACD

ACD is 100 % correct answer

DenskyDen

No its BCD. https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClUzCAK

secdaddy

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClUzCAK

shinichi_88Options: BCD

b c d correct

aadachOptions: BDE

once again: AP AA, config and session sync I've just checked it

aadachOptions: BDE

See that v10 PANOS gives: A/P, Enable Config Sync, Enable Session Synchronization