Palo Alto Networks NGFW Engineer — Question 14

In an active/active high availability (HA) configuration with two PA-Series firewalls, how do the firewalls use the HA3 interface?

Answer options

• A. To forward packets to the HA peer during session setup and asymmetric traffic flow
• B. To exchange hellos, heartbeats, HA state information, and management plane synchronization for routing and User-ID information
• C. To synchronize sessions, forwarding tables, IPSec security associations, and ARP tables between firewalls in an HA pair
• D. To perform session cache synchronization among all HA peers having the same cluster ID

Correct answer: A

Explanation

The correct answer is A because the HA3 interface is specifically designed for handling packet forwarding between HA peers during the establishment of sessions and managing asymmetric traffic. Options B, C, and D describe functions that are handled by other HA interfaces and do not accurately reflect the role of HA3.