nerdexam
Palo_Alto_Networks

PCNSE · Question #172

Which three firewall states are valid? (Choose three.)

The correct answer is A. Active D. Passive E. Suspended. The valid firewall states for high availability (HA) configurations are Active, Passive, and Suspended. These states define the operational role and readiness of each firewall in an HA pair.

Submitted by fatima_kr· Apr 18, 2026Operate

Question

Which three firewall states are valid? (Choose three.)

Options

  • AActive
  • BFunctional
  • CPending
  • DPassive
  • ESuspended

How the community answered

(48 responses)
  • A
    90% (43)
  • B
    4% (2)
  • C
    6% (3)

Why each option

The valid firewall states for high availability (HA) configurations are Active, Passive, and Suspended. These states define the operational role and readiness of each firewall in an HA pair.

AActiveCorrect

The Active state signifies that a firewall is currently processing traffic and performing all network functions.

BFunctional

Functional is not a standard firewall state recognized in Palo Alto Networks HA configurations.

CPending

Pending is not a standard firewall state recognized in Palo Alto Networks HA configurations.

DPassiveCorrect

The Passive state indicates a firewall is in standby, ready to take over traffic processing if the Active firewall fails.

ESuspendedCorrect

The Suspended state means a firewall has experienced a critical hardware or software failure and is temporarily removed from the HA pair's operational status.

Concept tested: Palo Alto Networks HA firewall states

Source: https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/high-availability/ha-concepts/ha-states-and-synchronization.html

Topics

#High Availability (HA)#Firewall States#Operational States#Palo Alto Networks

Community Discussion

No community discussion yet for this question.

Full PCNSE Practice