NGFW-ENGINEER · Question #84
A network security engineer at a 24/7 online retailer is upgrading an active/passive high availability (HA) cluster of PAN-OS firewalls. The primary goal is to perform the upgrade with no service inte
Sign in or unlock NGFW-ENGINEER to reveal the answer and full explanation for question #84. The question stem and answer options stay visible for context.
Question
A network security engineer at a 24/7 online retailer is upgrading an active/passive high availability (HA) cluster of PAN-OS firewalls. The primary goal is to perform the upgrade with no service interruption to online transactions. The engineer has already downloaded the new software to both devices. Which sequence of actions will meet this requirement?
Options
- AFrom Panorama, create a scheduled software update job targeting both firewalls in the HA pair to
- BUpgrade the passive firewall first while it is still in the passive state. Once it reboots and is
- CForce the active firewall into a suspended state to trigger a failover, then upgrade and reboot it.
- DDisable HA synchronization on the active firewall, upgrade the passive firewall, and then re-enable
Unlock NGFW-ENGINEER to see the answer
You've previewed enough free NGFW-ENGINEER questions. Unlock NGFW-ENGINEER for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.