nerdexam
Palo_Alto_Networks

PCNSE · Question #170

An administrator pushes a new configuration from Panorama to a pair of firewalls that are configured as an active/passive HA pair. Which NGFW receives the configuration from Panorama?

The correct answer is D. Both the active and passive firewalls independently, with no synchronization afterward. This has some info for migrating HA into Panorama: https://docs.paloaltonetworks.com/panorama/10-1/panorama-admin/manage-firewalls/transition- a-firewall-to-panorama-management/migrate-a-firewall-ha-pair-to-panorama-management Basically, Panorama configuration is not synced regar

Submitted by asante_acc· Apr 18, 2026Deploy and Configure

Question

An administrator pushes a new configuration from Panorama to a pair of firewalls that are configured as an active/passive HA pair. Which NGFW receives the configuration from Panorama?

Options

  • AThe Passive firewall, which then synchronizes to the active firewall
  • BThe active firewall, which then synchronizes to the passive firewall
  • CBoth the active and passive firewalls, which then synchronize with each other
  • DBoth the active and passive firewalls independently, with no synchronization afterward

How the community answered

(26 responses)
  • A
    8% (2)
  • C
    4% (1)
  • D
    88% (23)

Explanation

This has some info for migrating HA into Panorama: https://docs.paloaltonetworks.com/panorama/10-1/panorama-admin/manage-firewalls/transition- a-firewall-to-panorama-management/migrate-a-firewall-ha-pair-to-panorama-management Basically, Panorama configuration is not synced regardless of if the config sync box is checked. Only local configuration will be synchronized if the config sync box is checked.

Topics

#Panorama#High Availability (HA)#Configuration Deployment#Active/Passive

Community Discussion

No community discussion yet for this question.

Full PCNSE Practice