Welcome to ExamTopics
ExamTopics Logo
- Expert Verified, Online, Free.
Location Chicago IL, USA

Exam PCNSE topic 1 question 7 discussion

Actual exam question from Palo Alto Networks's PCNSE
Question #: 7
Topic #: 1
[All PCNSE Questions]

An administrator pushes a new configuration from Panorama to a pair of firewalls that are configured as an active/passive HA pair.
Which NGFW receives the configuration from Panorama?

  • A. The passive firewall, which then synchronizes to the active firewall
  • B. The active firewall, which then synchronizes to the passive firewall
  • C. Both the active and passive firewalls, which then synchronize with each other
  • D. Both the active and passive firewalls independently, with no synchronization afterward
Show Suggested Answer Hide Answer

Suggested Answer: D

Comments

Mohammed
Highly Voted 1 year, 2 months ago
I thisnk answer is D https://live.paloaltonetworks.com/t5/General-Topics/config-push-from-panorama-to-HA-PA/td-p/236297
upvoted 7 times
...
oo7
Highly Voted 1 year, 1 month ago
D https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000CleOCAS
upvoted 5 times
...
uNburNed
Most Recent 4 days, 11 hours ago
Should be C
upvoted 1 times
...
theroghert
3 months, 3 weeks ago
only D
upvoted 1 times
...
Sarbi
6 months, 1 week ago
Ths answer is D
upvoted 1 times
...
lol1000
7 months, 2 weeks ago
Answer: D sk suggests that Panorama policy is pushed to both units and no sync is performed per se. This means that any local policy would need to be synced separately https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000CleOCAS
upvoted 1 times
...
guilherme_a
9 months, 1 week ago
D is correct
upvoted 1 times
...
hyperv89
9 months, 3 weeks ago
From work Experience the answer is D
upvoted 1 times
...
yelatthein
9 months, 4 weeks ago
D is correct.
upvoted 1 times
...
Nib2002
11 months ago
What Settings Don’t Sync in Active/Passive HA? https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/high-availability/reference-ha-synchronization/what-settings-dont-sync-in-activepassive-ha.html#id88817587-918d-4c99-8576-271b8df7ba6c but the question is asking that if some configuration is pushed to HA pair from panaroma then what happens?
upvoted 1 times
...
bnilam2
12 months ago
D is the answer
upvoted 1 times
...
mmmasa
1 year ago
C is correct https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000CleOCAS "So we have to push the configurations from the Panorama applicance to both devices in order to make the configurations the same on both units."
upvoted 1 times
naicoram
1 year ago
D is the correct one as @ChiaPet75 said "... confs are not synced up between firewalls in the HA Pairs"
upvoted 2 times
...
...
ChiaPet75
1 year ago
The answer is D PAN-EDU-220-V9 (page 14) "if you make a change and perform a Commit > Push to Device, the change will be sent to both the firewalls in the HA pair. This action is needed because Panorama configurations are not synced up between the firewalls in the HA pair."
upvoted 1 times
...
Ab121213
1 year ago
That is what I found in the Study guide : In high availability (HA) firewall configurations, each HA peer performs connectivity tests independently of each other, and HA config syncs may occur only after each HA successfully tests connectivity to Panorama and verifies its connection. So , I think D is correct.
upvoted 2 times
...

SaveCancel