Palo Alto Networks Certified Network Security Engineer (PCNSE) — Question 280

An administrator has configured a pair of firewalls using high availability in Active/Passive mode.
Link and Path Monitoring is enabled with the Failure Condition set to `any`.
There is one link group configured containing member interfaces ethernet1/1 and ethernet1/2 with a Group Failure Condition set to `all`.
Which HA state will the Active firewall go into if ethernet1/1 link goes down due to a failure?

Answer options

• A. Active
• B. Passive
• C. Active-Secondary
• D. Non-functional

Correct answer: A

Explanation

The Active firewall will remain in the 'Active' state because the Failure Condition for Link and Path Monitoring is set to 'any'. This means as long as there is one operational link in the group, it will not transition to a different state. The other options are incorrect as they would only apply if both links in the group were down.