| Exam Name: | Palo Alto Networks Certified Security Engineer (PCNSE) PAN-OS 11.0 | ||
| Exam Code: | PCNSE Dumps | ||
| Vendor: | Paloalto Networks | Certification: | Palo Alto Certifications and Accreditations |
| Questions: | 250 Q&A's | Shared By: | jaxxon |
An administrator has configured a pair of firewalls using high availability in Active/Passive mode. Link and Path Monitoring is enabled with the Failure Condition set to "any." There is one link group configured containing member interfaces ethernet1/1 and ethernet1/2 with a Group Failure Condition set to "all."
Which HA state will the Active firewall go into if ethernet1/1 link goes down due to a failure?'
A network engineer has discovered that asymmetric routing is causing a Palo Alto Networks firewall to drop traffic. The network architecture cannot be changed to correct this.
Which two actions can be taken on the firewall to allow the dropped traffic permanently? (Choose two.)
When a new firewall joins a high availability (HA) cluster, the cluster members will synchronize all existing sessions over which HA port?
An engineer configures a specific service route in an environment with multiple virtual systems instead of using the inherited global service route configuration.
What type of service route can be used for this configuration?
TESTED 21 Dec 2024
