nerdexam
Palo_Alto_Networks

NGFW-ENGINEER · Question #30

Which interface types should be used to configure link monitoring for a high availability (HA) deployment on a Palo Alto Networks NGFW?

The correct answer is C. Virtual Wire, Layer 2, and Layer 3. Link monitoring in a Palo Alto Networks HA deployment watches the state of data-plane interfaces and triggers a failover if a monitored link goes down. The interface types eligible for link monitoring are Virtual Wire, Layer 2, and Layer 3 - these are the interface types that…

Implement High Availability

Question

Which interface types should be used to configure link monitoring for a high availability (HA) deployment on a Palo Alto Networks NGFW?

Options

  • AHA, Virtual Wire, and Layer 2
  • BTap, Virtual Wire, and Layer 3
  • CVirtual Wire, Layer 2, and Layer 3
  • DHA, Layer 2. and Layer 3

How the community answered

(39 responses)
  • A
    10% (4)
  • B
    3% (1)
  • C
    79% (31)
  • D
    8% (3)

Explanation

Link monitoring in a Palo Alto Networks HA deployment watches the state of data-plane interfaces and triggers a failover if a monitored link goes down. The interface types eligible for link monitoring are Virtual Wire, Layer 2, and Layer 3 - these are the interface types that carry production traffic. Answer C lists exactly these three types. HA interfaces (used for heartbeat and session state synchronization) are dedicated control-plane links and are not configured as link-monitored interfaces - they have their own failure detection mechanism. Tap interfaces are passive, read-only monitoring ports and have no role in HA link monitoring. Answers A and D incorrectly include the HA interface type. Answer B incorrectly includes Tap and omits Layer 3.

Topics

#High Availability (HA)#Link Monitoring#Interface Configuration#NGFW Deployment

Community Discussion

No community discussion yet for this question.

Full NGFW-ENGINEER Practice