Which interfaces can be monitored using link monitoring in PAN-OS HA?

Any data-plane interface that carries network traffic.

Only the HA control interfaces.

In an active/active HA deployment, what is the purpose of flow rules?

To synchronize the session table between the two firewalls in real time.

To ensure that all traffic for a session is processed by the same firewall, even if the traffic is asymmetric.

To load balance traffic evenly between the two firewalls based on the number of sessions.

To block asymmetric traffic that could cause security issues.

In PAN-OS HA monitoring, what is the purpose of setting a failure threshold?

To set the time interval between each probe.

To define how many consecutive probe failures must occur before a failover is triggered.

To set the maximum number of sessions that can be active before failover.

To define the percentage of CPU usage that triggers failover.

A company is considering deploying two firewalls in an active/active HA configuration. The network team wants to maximize throughput by using both firewalls to process traffic. What is a key characteristic of active/active HA that supports this goal?

The firewalls must be connected to different ISPs to load balance.

Both firewalls can actively process traffic simultaneously.

Both firewalls share the same session table and process the same traffic.

One firewall is always passive and only takes over on failure.

What is the purpose of link monitoring in a PAN-OS HA configuration?

To track the reachability of specific IP addresses through data-plane interfaces.

To monitor the HA heartbeat link to ensure the peer is reachable.

To monitor the CPU and memory usage of the firewall to detect performance issues.

To track the status of specific data-plane interfaces and trigger failover if a monitored link goes down.

Palo Alto NetworksCertified Next-Generation Firewall Engineer

Domain 1Objective 3

1.3 Configure High Availability (HA) NEXT-GENERATION-FIREWALL-ENGINEER Practice Questions (Page 5)

Part of the PAN-OS Networking Configuration domain, which accounts for 40% of the NEXT-GENERATION-FIREWALL-ENGINEER exam.

26questions here

6free pages

9concepts

40%of the exam

Questions 21–25

21foundation · easy
Which interfaces can be monitored using link monitoring in PAN-OS HA?
Select an answer first
22foundation · easy
In an active/active HA deployment, what is the purpose of flow rules?
Select an answer first
23foundation · easy
In PAN-OS HA monitoring, what is the purpose of setting a failure threshold?
Select an answer first
24application · medium
A company is considering deploying two firewalls in an active/active HA configuration. The network team wants to maximize throughput by using both firewalls to process traffic. What is a key characteristic of active/active HA that supports this goal?
Select an answer first
25foundation · easy
What is the purpose of link monitoring in a PAN-OS HA configuration?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NEXT-GENERATION-FIREWALL-ENGINEER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Palo Alto Networks. “NEXT-GENERATION-FIREWALL-ENGINEER” is a trademark of its owner, used for identification only.