Correct Answer B C & D
HA Lite is an active/passive deployment that provides configuration synchronization and some run-time data synchronization such as IPsec security associations. It does not support session synchronization (HA2), and therefore does not offer stateful failover.
Note that HA Lite is not present in PAN 10: Compare 8.1 and 10 docs here: https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-admin/high-availability/ha-concepts/ha-modes.html
Correct Answer B C & D
HA Lite is an active/passive deployment that provides configuration synchronization and some run-time data synchronization such as IPsec security associations. It does not support session synchronization (HA2), and therefore does not offer stateful failover.
IPSec SAs and IKE SAs (both phase 1 and phase 2) are not synchronized between HA peers. This is because IPSec Security Associations are dynamically established and include unique session keys and parameters negotiated during the IKE handshake.
BCD
HA-Lite offers the following capabilities:
A/P High Availability without session sync
Failover of IPSec Tunnels (sessions must be re-established)
DHCP Lease information
PPPoE lease information
Configuration sync
Layer 3 forwarding tables
BCD are the correct answers
The PA-200 (a discontinued model) firewall supports HA Lite only. HA Lite is an active/passive deployment that provides configuration synchronization and some run-time data synchronization such as IPsec security associations. It does not support session synchronization (HA2), and therefore does not offer stateful failover.
upvoted 4 times
...
This section is not available anymore. Please use the main Exam Page.PCNSE Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Silent_Sanctuary
Highly Voted 4 years, 11 months agoeyelasers1
3 years, 2 months agoduckduckgooo
2 years, 1 month agokewokil120
Most Recent 4 months, 3 weeks agoEmanc21
6 months, 2 weeks agoMarshpillowz
1 year, 3 months agoSarbi
2 years, 4 months agoDenskyDen
2 years, 4 months agosecdaddy
2 years, 7 months agoshinichi_88
3 years, 3 months agoaadach
4 years, 1 month agoaadach
4 years, 1 month agommed
4 years, 1 month agolol1000
4 years, 6 months agocybermate
4 years, 11 months ago