A client is deploying a pair of PA-5000 series firewalls using High Availability (HA) in Active/Passive mode. Which statement is true about this deployment?

The correct answer is D. The management port may be used for a backup control connection. Set up the backup control link connection. 1. In Device > High Availability > General, edit the Control Link (HA1 Backup) section. 2. Select the HA1 backup interface and set the IPv4/IPv6 Address and Netmask. Note: Use the management port for the HA1 link…

Submitted by dimitri_ru· Apr 18, 2026Deploy and Configure

Question

Options

AThe two devices must share a routable floating IP address
BThe two devices may be different models within the PA-5000 series
CThe HA1 IP address from each peer must be on a different subnet
DThe management port may be used for a backup control connection

How the community answered

(58 responses)

A
2% (1)
B
5% (3)
C
3% (2)
D
90% (52)

Explanation

Set up the backup control link connection. 1. In Device > High Availability > General, edit the Control Link (HA1 Backup) section. 2. Select the HA1 backup interface and set the IPv4/IPv6 Address and Netmask. Note: Use the management port for the HA1 link. https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/high-availability/set-up- activepassive-ha/configure-activepassive-ha

Topics

#High Availability (HA)#Active/Passive HA#HA Configuration#Management Port

Community Discussion

No community discussion yet for this question.

Full PCNSE Practice