Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Question 6 of 267
Free Preview · 267 of 889 · questions 1–267 of 889 are free. Sign up free to sync your progress across devices.
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
The lower the number, the higher the priority.
Straight from Palo website "The firewall with the lower numerical value, and therefore higher priority, is designated as active" Have to set a higher numerical value for the passive. D is the only option https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/high-availability/ha-concepts/device-priority-and-preemption
The correct answer is: B. 99 Explanation: In Palo Alto Networks active/passive High Availability (HA) configuration: The active firewall should have a higher priority (e.g., 100). The passive (standby) firewall should have a lower priority (e.g., 99). This ensures that the firewall with the higher priority (100) takes the active role, while the one with the lower priority (99) remains in standby mode. Why Not the Other Options? A. 0 – Too low and not a typical best practice (could cause issues if HA negotiation fails). C. 1 – While technically possible, it’s not the standard approach when the active firewall is set to 100. D. 255 – This is the default HA priority, not used for passive firewalls in an active/passive setup. Thus, B (99) is the correct priority for the passive firewall when the active firewall is set to 100.