nerdexam
Palo_Alto_Networks

NGFW-ENGINEER · Question #104

A Palo Alto Networks firewall has the following interfaces configured: - ethernet1/1 (Layer 3) - ethernet1/2 (TAP) - ethernet1/3 (Layer 2) - ethernet1/4 (virtual wire) An administrator needs to…

The correct answer is D. ethernet1/1, ethernet1/3, ethernet1/4. A link group for HA link monitoring is built from data-plane interfaces that represent forwarding links, which includes Layer 3, Layer 2, and virtual wire interfaces, while TAP interfaces are excluded because they are receive-only and do not provide a meaningful link state for…

High Availability Configuration

Question

A Palo Alto Networks firewall has the following interfaces configured:

  • ethernet1/1 (Layer 3)
  • ethernet1/2 (TAP)
  • ethernet1/3 (Layer 2)
  • ethernet1/4 (virtual wire)

An administrator needs to create a link group to monitor upstream connectivity for high availability (HA) failover. Which set of interfaces can be added to the link group?

Options

  • Aethernet1/1, ethernet1/2, ethernet1/4
  • Bethernet1/1, ethernet1/2, ethernet1/3
  • Cethernet1/2, ethernet1/3, ethernet1/4
  • Dethernet1/1, ethernet1/3, ethernet1/4

How the community answered

(30 responses)
  • A
    7% (2)
  • B
    17% (5)
  • C
    3% (1)
  • D
    73% (22)

Explanation

A link group for HA link monitoring is built from data-plane interfaces that represent forwarding links, which includes Layer 3, Layer 2, and virtual wire interfaces, while TAP interfaces are excluded because they are receive-only and do not provide a meaningful link state for upstream connectivity monitoring.

Topics

#HA Link Groups#Interface Types#Palo Alto Networks HA#Failover Monitoring

Community Discussion

No community discussion yet for this question.

Full NGFW-ENGINEER Practice