Examice

Exam PCNSE All QuestionsBrowse all questions from this exam

Question 277

What is the best description of the HA4 Keep-alive Threshold (ms)?

the timeframe that the local firewall waits before going to Active state when another cluster member is preventing the cluster from fully synchronizing

the timeframe within which the firewall must receive keepalives from a cluster member to know that the cluster member is functional

the maximum interval between hello packets that are sent to verify that the HA functionality on the other firewall is operational

the time that a passive or active-secondary firewall will wait before taking over as the active or active-primary firewall

Correct Answer: C

The best description of the HA4 Keep-alive Threshold in milliseconds (ms) is the maximum interval between hello packets that are sent to verify that the HA functionality on the other firewall is operational. The HA4 link is specific to session state synchronization, and the keep-alive mechanism ensures that the HA functionality is maintained by checking the operational status of the other firewall through periodic hello packets.

Discussion

west33637Option: B

https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-admin/high-availability/configure-ha-clustering STEP 3

confusionOption: B

B (Optional) Change the HA4 Keep-alive Threshold (ms) to specify the timeframe within which the firewall must receive keepalives from a cluster member to know that the cluster member is functional; range is 5,000 to 60,000; default is 10,000.

TAKUM1yOption: B

https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/high-availability/configure-ha-clustering

PaloSteveOption: C

This is VERY close to a PCNSE practice question. The answer there for the HA4 timer is: The maximum interval between hello packets that are sent to verify that the HA functionality on the other firewall is operational. From the HA links section of the PCNSE Study Guide: HA cluster members use an HA4 link and HA4 backup link to perform session state synchronization. HA1 (control link), HA2 (data link), and HA3 (packet-forwarding link) are not supported between cluster members that aren’t HA pairs.