Palo Alto Networks Certified Network Security Engineer (PCNSE) — Question 261

What is the best description of the HA4 Keep-alive Threshold (ms)?

Answer options

• A. the timeframe that the local firewall waits before going to Active state when another cluster member is preventing the cluster from fully synchronizing
• B. the timeframe within which the firewall must receive keepalives from a cluster member to know that the cluster member is functional
• C. the maximum interval between hello packets that are sent to verify that the HA functionality on the other firewall is operational
• D. the time that a passive or active-secondary firewall will wait before taking over as the active or active-primary firewall

Correct answer: B

Explanation

The correct answer, B, accurately describes the HA4 Keep-alive Threshold as the time frame needed for receiving keepalives to confirm a cluster member's functionality. Option A is incorrect as it focuses on synchronization rather than functionality. Option C does not specifically address the keep-alive aspect, and option D discusses failover timing rather than the threshold for keepalives.