PCNSE High Availability Configuration Quiz

1. What must be synchronized between HA peers to prevent session loss during failover?

Only firewall rules

Active sessions and connection state

Only user accounts

Interface configurations only

2. What is a critical consideration when upgrading firmware in an HA pair?

Both firewalls must upgrade simultaneously

Upgrade passive first, then failover and upgrade active

Disable HA during upgrade

Upgrade only the primary firewall

3. In active-active HA, how are traffic flows typically divided between peers?

By source IP hash

By round-robin

By firewall load

By administrator assignment

4. Which HA feature ensures consistent policy enforcement across failover events?

Session synchronization

Configuration synchronization

Log replication

Certificate sharing

5. What is the maximum recommended distance for HA1 link in Palo Alto deployments?

10 meters

100 meters

1 kilometer

10 kilometers

6. In HA pairs, what is split-brain and how is it prevented?

Both firewalls become active simultaneously; prevented by heartbeat

Loss of configuration; prevented by backup

Interface failure; prevented by redundancy

Memory corruption; prevented by checksums

7. Which command verifies HA status on Palo Alto firewalls?

Show ha status

Show ha info

Show high-availability

Display ha peer

8. What occurs if the HA heartbeat is lost between peer firewalls?

Passive firewall waits indefinitely

Passive firewall becomes active after timeout

Both firewalls stop processing traffic

Configuration rolls back

9. In HA configuration, what is the purpose of the preempt setting?

Increase heartbeat frequency

Allow original active firewall to retake active role

Reduce failover time

Balance CPU load

10. Which interface type is NOT typically used for HA link connectivity?

Dedicated Ethernet

Management port

Data port

Serial console

11. In an active-passive HA configuration, which firewall handles all traffic while the peer remains in standby?

Primary firewall only

Secondary firewall only

Both firewalls equally

Whichever has lower CPU

12. In HA mode, which firewall owns the virtual IP (VIP) address?

Primary firewall always

Whichever is active

Both firewalls share it

Neither firewall

13. What is the default HA failover timeout in Palo Alto Networks firewalls?

3 seconds

10 seconds

30 seconds

60 seconds

14. Which configuration element must be identical between HA peer firewalls?

Serial numbers

Management IP addresses

Security policies and objects

Firmware versions only

15. What is the purpose of the HA2 link in Palo Alto HA pairs?

Backup heartbeat only

Session and state synchronization

Management traffic

Internet connectivity

16. In HA configuration, what does the HA1 link primarily carry?

Data traffic

Heartbeat and control messages

Encrypted logs

VPN tunnels

17. Which protocol is used for HA heartbeat and state synchronization?

HTTP

SSH

Proprietary Palo Alto protocol

SNMP

18. What happens when the active firewall in an HA pair fails?

Network becomes offline

Passive firewall becomes active

Manual intervention required

Traffic is dropped permanently

19. Which HA mode allows both firewalls to process traffic simultaneously?

Active-passive

Active-active

Warm standby

Cold standby

20. What is the primary purpose of the HA heartbeat in Palo Alto HA pairs?

Monitor link bandwidth

Detect peer availability and synchronize state

Encrypt all traffic

Manage licensing