PCNSE · Question #677
An engineer reviews high availability (HA) settings to understand a recent HA failover event. Review the screenshot below. Which timer determines how long the passive firewall will wait before…
The correct answer is B. Promotion Hold Time. The 'Promotion Hold Time' (Option B) is the specific HA timer that controls how long the passive firewall waits before promoting itself to the active role after it stops receiving heartbeats from the active peer. This delay prevents unnecessary failovers caused by momentary…
Question
An engineer reviews high availability (HA) settings to understand a recent HA failover event. Review the screenshot below. Which timer determines how long the passive firewall will wait before taking over as the active firewall after losing communications with the HA peer?
Exhibit
Options
- AHeartbeat Interval
- BPromotion Hold Time
- CAdditional Master Hold Up Time
- DMonitor Fail Hold Up Time
How the community answered
(18 responses)- A6% (1)
- B89% (16)
- C6% (1)
Explanation
The 'Promotion Hold Time' (Option B) is the specific HA timer that controls how long the passive firewall waits before promoting itself to the active role after it stops receiving heartbeats from the active peer. This delay prevents unnecessary failovers caused by momentary communication disruptions. The other timers serve different purposes: 'Heartbeat Interval' controls how frequently HA peers check each other's health; 'Additional Master Hold Up Time' adds extra delay on the active unit before it yields the active role (used to prevent flapping in a split-brain scenario); and 'Monitor Fail Hold Up Time' is the delay before failover is triggered when a monitored path (link monitor or path monitor) fails - not when the HA peer communication is lost.
Topics
Community Discussion
No community discussion yet for this question.