nerdexam
Palo_Alto_NetworksPalo_Alto_Networks

PCNSE · Question #687

PCNSE Question #687: Real Exam Question with Answer & Explanation

The correct answer is B: Check peer IP address In the permit list In Device > Setup > Management > Interfaces >. If the HA status is showing as down after enabling HA Heartbeat Backup on two devices, an administrator could troubleshoot the issue by checking the peer IP address in the permit list in Device > Setup > Management > Interfaces > Management Interface Settings. This is described i

Submitted by rachelw· Apr 18, 2026Configuration Troubleshooting

Question

An administrator Just enabled HA Heartbeat Backup on two devices. However, the status on tie firewall's dashboard is showing as down High Availability. What could an administrator do to troubleshoot the issue?

Options

  • AGoto Device > High Availability> General > HA Pair Settings > Setup and configuring the peer IP
  • BCheck peer IP address In the permit list In Device > Setup > Management > Interfaces >
  • CGo to Device > High Availability > HA Communications> General> and check the Heartbeat
  • DCheck peer IP address for heartbeat backup to Device > High Availability > HA

Explanation

If the HA status is showing as down after enabling HA Heartbeat Backup on two devices, an administrator could troubleshoot the issue by checking the peer IP address in the permit list in Device > Setup > Management > Interfaces > Management Interface Settings. This is described in the Palo Alto Networks PCNSE Study Guide in Chapter 7: High Availability, under the section "Configure Heartbeat Backup for Redundancy": "Verify that the management interface's permitted IP addresses on each peer includes the IP address of the other peer's Heartbeat Backup interface."

Topics

#High Availability (HA)#Troubleshooting#Management Interface#Access Control

Community Discussion

No community discussion yet for this question.

Full PCNSE PracticeBrowse All PCNSE Questions