An engineer is monitoring an active/active high availability (HA) firewall pair. Which HA firewall state describes the firewall that is currently processing traffic?

The correct answer is D. Active-primary. In an active/active configuration, state of the firewall that connects to User-ID agents, runs DHCP server and DHCP relay, and matches NAT and PBF rules with the Device ID of the active-primary firewall. A firewall in this state can own sessions and set up sessions. https://docs.

Submitted by minji_kr· Apr 18, 2026Operate

Question

Options

APassive
BInitial
CActive
DActive-primary

How the community answered

(53 responses)

A
2% (1)
B
4% (2)
C
8% (4)
D
87% (46)

Explanation

In an active/active configuration, state of the firewall that connects to User-ID agents, runs DHCP server and DHCP relay, and matches NAT and PBF rules with the Device ID of the active-primary firewall. A firewall in this state can own sessions and set up sessions. https://docs.paloaltonetworks.com/pan-os/11-1/pan-os-admin/high-availability/ha-firewall-states

Topics

#High Availability#HA States#Active/Active#Firewall Monitoring

Community Discussion

No community discussion yet for this question.

Full PCNSE Practice