PCNSE · Question #776
Panorama is being used to upgrade the PAN-OS version on a pair of firewalls in an active/passive high availability (HA) configuration. The Palo Alto Networks best practice upgrade steps have been comp
Sign in or unlock PCNSE to reveal the answer and full explanation for question #776. The question stem and answer options stay visible for context.
Question
Panorama is being used to upgrade the PAN-OS version on a pair of firewalls in an active/passive high availability (HA) configuration. The Palo Alto Networks best practice upgrade steps have been completed in Panorama (Panorama upgraded, backups made, content updates, and disabling "Preemptive" pushed), and the firewalls are ready for upgrade. What is the next best step to minimize downtime and ensure a smooth transition?
Options
- AUpgrade both HA peers at the same time using Panorama's "Group HA Peers" option to ensure
- BSuspend the active firewall, upgrade it first, and reboot to verify it comes back online before
- CPerform the upgrade on the active firewall first while keeping the passive peer online to maintain
- DUpgrade only the passive peer first, reboot it, restore HA functionality, and then upgrade the
Unlock PCNSE to see the answer
You've previewed enough free PCNSE questions. Unlock PCNSE for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.