A company runs an active/active HA pair. The network team notices that some sessions are being processed by both firewalls, causing inconsistent behavior. They want to ensure that each session is processed by only one firewall. What should be configured?

Enable link monitoring on all interfaces.

Configure the HA pair to use active/passive mode.

Configure flow rules to direct traffic to the firewall that owns the session.

Enable state synchronization on the HA pair.

Palo Alto NetworksCertified Next-Generation Firewall Engineer

Domain 1Objective 3

1.3 Configure High Availability (HA) NEXT-GENERATION-FIREWALL-ENGINEER Practice Questions (Page 6)

Part of the PAN-OS Networking Configuration domain, which accounts for 40% of the NEXT-GENERATION-FIREWALL-ENGINEER exam.

26questions here

6free pages

9concepts

40%of the exam

Questions 26–26

26application · medium
A company runs an active/active HA pair. The network team notices that some sessions are being processed by both firewalls, causing inconsistent behavior. They want to ensure that each session is processed by only one firewall. What should be configured?
Select an answer first

Finished these 1 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to NEXT-GENERATION-FIREWALL-ENGINEER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Palo Alto Networks. “NEXT-GENERATION-FIREWALL-ENGINEER” is a trademark of its owner, used for identification only.

1.3 Configure High Availability (HA) NEXT-GENERATION-FIREWALL-ENGINEER Practice Questions (Page 6)

Questions 26–26

A company runs an active/active HA pair. The network team notices that some sessions are being processed by both firewalls, causing inconsistent behavior. They want to ensure that each session is processed by only one firewall. What should be configured?

Keep studying — PAN-OS Networking Configuration