An administrator notices interface ethernet1/2 failed on the active firewall in an active I passive firewall high availability(HA) pair. Based on the image below, what - if any - action was taken by t

The correct answer is A. No action was taken because interface ethernet1/1 did not fail.. Link Monitoring in Palo Alto HA triggers a failover only when a monitored interface fails. Based on the referenced image, the Link Monitoring configuration was set to watch ethernet1/1, not ethernet1/2. Because ethernet1/1 remained up, the HA failure condition was never met. The

Submitted by wei.xz· Apr 18, 2026Deploy and Configure

Question

An administrator notices interface ethernet1/2 failed on the active firewall in an active I passive firewall high availability(HA) pair. Based on the image below, what - if any - action was taken by the active firewall when the link failed?

Exhibit

Options

ANo action was taken because interface ethernet1/1 did not fail.
BThe active firewall failed over to the passive HA member due to an AE1 Link Group failure.
CNo action was taken because Path Monitoring is disabled.
DThe active firewall failed over to the passive HA member because "any" is selected for the Link

How the community answered

(53 responses)

A
79% (42)
B
13% (7)
C
2% (1)
D
6% (3)

Explanation

Link Monitoring in Palo Alto HA triggers a failover only when a monitored interface fails. Based on the referenced image, the Link Monitoring configuration was set to watch ethernet1/1, not ethernet1/2. Because ethernet1/1 remained up, the HA failure condition was never met. The failure of ethernet1/2 alone does not satisfy the monitored link group condition, so the active firewall took no action and did not fail over to the passive member.

Topics

#High Availability (HA)#Link Monitoring#Failover Conditions#Interface Status

Community Discussion

No community discussion yet for this question.

Full PCNSE Practice