PCNSE Question 7

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose B2

  The correct answer is: B. The active firewall, which then synchronizes to the passive firewall Explanation: When pushing a configuration from Panorama to a pair of firewalls configured in an active/passive High Availability (HA) pair, the following process occurs: Panorama sends the configuration to the active firewall: Panorama communicates directly with the active firewall in the HA pair and pushes the new configuration to it. The active firewall synchronizes the configuration to the passive firewall: After receiving the configuration, the active firewall automatically synchronizes the configuration to the passive firewall to ensure both devices have the same settings. This approach ensures consistency between the active and passive firewalls and avoids configuration mismatches that could cause issues during failover.

• Chose D1

  I set up a lab with an HA pair, both devices received the configuration in their respective template stack and then, performed a commit. Because the values are the same, no synchronization is needed.

• Chose D2

  D is the correct answer. https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000CleOCAS