1.3 Configure High Availability (HA) NEXT-GENERATION-FIREWALL-ENGINEER Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   An organization has an active/passive HA pair. The active firewall is scheduled for maintenance. The network team wants the passive firewall to become active and handle traffic during the maintenance window, and then have the original active firewall take over again after maintenance is complete. What should be configured?

   • AConfigure the HA pair to use active/active mode.
   • BEnable preemption on the HA pair.
   • CEnable state synchronization on the HA pair.
   • DEnable link monitoring on all interfaces.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   How does active/active HA handle load balancing of new sessions between the two firewalls?

   • AIt sends all new sessions to the primary firewall until it reaches capacity.
   • BIt uses a hash of session attributes, such as source and destination IP, to determine the owning firewall.
   • CIt uses a round-robin algorithm that alternates sessions between the firewalls.
   • DIt assigns sessions based on the firewall with the lowest current CPU usage.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   What is a key purpose of deploying an active/active HA pair in a PAN-OS environment?

   • ATo increase throughput by allowing both firewalls to forward traffic concurrently.
   • BTo simplify configuration by having a single firewall manage all security policies.
   • CTo ensure that all traffic is inspected twice for enhanced security.
   • DTo provide a standby firewall that only activates on failure of the primary.
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   In an active/active HA configuration on PAN-OS, what is the primary characteristic of how the two firewalls handle traffic?

   • AOne firewall handles all traffic while the other only monitors the network for security threats.
   • BOne firewall processes all traffic while the other remains idle until a failure occurs.
   • CBoth firewalls actively process data-plane traffic simultaneously, sharing the load.
   • DBoth firewalls process traffic, but only one at a time based on a round-robin schedule.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   An organization has two firewalls in an active/passive HA pair. The active firewall fails, and the passive firewall takes over. After the failure, the network team notices that existing user sessions are lost and must be re-established. What is the most likely reason for this?

   • AThe passive firewall did not have the same interface IP addresses configured.
   • BThe passive firewall had a different security policy than the active firewall.
   • CState synchronization was not enabled on the HA pair.
   • DThe passive firewall was not configured with the same virtual router settings.
   Reveal Solution Discussion Select an answer first