PSE-PLATFORM Question #172: Real Exam Question with Answer & Explanation

The correct answer is B. The firewalls must have the same set of licenses. C. The peer HA1 IP address must be the same on both firewalls.. Explanation/Reference: To set up high availability on your Palo Alto Networks firewalls, you need a pair of firewalls that meet the following requirements: The same set of licenses --Licenses are unique to each firewall and cannot be shared between the firewalls. Therefore, you m

Question

What are two prerequisites for configuring a pair of Palo Alto Networks firewalls in an active/passive High Availability (HA) pair? (Choose two.)

Options

AThe management interfaces must be on the same network.
BThe firewalls must have the same set of licenses.
CThe peer HA1 IP address must be the same on both firewalls.
DHA1 should be connected to HA1, either directly or with an intermediate Layer 2 device.

Explanation

Explanation/Reference: To set up high availability on your Palo Alto Networks firewalls, you need a pair of firewalls that meet the following requirements: The same set of licenses --Licenses are unique to each firewall and cannot be shared between the firewalls. Therefore, you must license both firewalls identically. If both firewalls do not have an identical set of licenses, they cannot synchronize configuration information and maintain parity for a seamless failover. The same type of interfaces --Dedicated HA links, or a combination of the management port and in-band ports that are set to interface type HA. Determine the IP address for the HA1 (control) connection between the HA peers. The HA1 IP address for both peers must be on the same subnet if they are directly connected or are connected to the same switch.

Community Discussion

No community discussion yet for this question.

Full PSE-PLATFORM Practice