Exam PCSFE topic 1 question 30 discussion

Both A and B seem correct, But still I will go with B. Floating IP Address, is specifically designed to allow the HA pair to share a single IP address that can be used as the network's gateway IP address. While ARP Load-Sharing does involve sharing an IP address, it is more focused on load balancing rather than serving as a single gateway IP address in an active-active HA configuration. The Floating IP Address is the feature that directly addresses the requirement of sharing a single IP address as the network's gateway. - Copilot. Src: https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/high-availability/ha-concepts/arp-load-sharing https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-admin/high-availability/set-up-activeactive-ha/determine-your-activeactive-use-case/use-case-configure-activeactive-ha-with-floating-ip-address-bound-to-active-primary-firewall#id93973f10-2001-4ae4-b475-faa7e70967c1

I think it is A (ARP Load Shareing), as you will need at least two floating IP to distribute the traffic over both fw and you will be using two default gw in your network.

A & B are correct answers. The question doesn't specified if there is a L3 device between PA and end host (ARP load Sharing) A -> https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/high-availability/ha-concepts/arp-load-sharing B -> https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/high-availability/ha-concepts/floating-ip-address-and-virtual-mac-address

A) In a Layer 3 interface deployment and active/active HA configuration, ARP load-sharing allows the firewalls to share an IP address and provide gateway services. Use ARP load-sharing only when no Layer 3 device exists between the firewall and end hosts, that is, when end hosts use the firewall as their default gateway.