exam questions

Exam PCNSC All Questions

View all questions & answers for the PCNSC exam

Exam PCNSC topic 1 question 38 discussion

Actual exam question from Palo Alto Networks's PCNSC
Question #: 38
Topic #: 1
[All PCNSC Questions]

Your customer wants to implement Active/Active High Availability for their PA-5260 pair. The following conditions are true in their environment:
-They are using multiple Layer 3 interfaces to process traffic.
-Their routing topology requires the use of Network Address Translation policies to ensure that traffic can reach its destinations correctly.
-They prefer to have the session workload distributed as evenly as possible to ensure both firewalls have lower resource utilization.
-They make use of dynamic routing protocols on their virtual routers for route-based redundancy.
-They chose to go with Active/Active for failover speed reasons.
Which three of the following HA configurations should your customer ensure they use to meet these requirements? (Choose three.)

  • A. HA1A, HA1B, and HA2 interfaces
  • B. HA1A, HA1B, HA2, and HA3 interfaces
  • C. Session selection algorithm – Primary Device
  • D. Active/Active HA Binding in the NAT policies
  • E. Session selection algorithm – First Packet
Show Suggested Answer Hide Answer
Suggested Answer: BDE 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Reprintme
3 weeks, 6 days ago
Selected Answer: BDE
Active/Active needs HA3. HA3 is the link that is used to forward packets between the firewalls.
upvoted 1 times
...
Xuzi
2 months ago
Selected Answer: ADE
HA1A, HA1B, HA2, and HA3 interfaces: HA3 interfaces are used for Layer 2 HA deployments, not Layer 3 Active/Active. In a Layer 3 environment, HA1 and HA2 are sufficient.
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago