Palo Alto Networks Certified Network Security Engineer (PCNSE) — Question 29

An administrator pushes a new configuration from Panorama to a pair of firewalls that are configured as an active/passive HA pair.
Which NGFW receives the configuration from Panorama?

Answer options

• A. The passive firewall, which then synchronizes to the active firewall
• B. The active firewall, which then synchronizes to the passive firewall
• C. Both the active and passive firewalls, which then synchronize with each other
• D. Both the active and passive firewalls independently, with no synchronization afterward

Correct answer: D

Explanation

The correct answer is D because in an active/passive HA setup, the firewalls operate independently after receiving configuration updates from Panorama. The other options incorrectly suggest a synchronization process that does not occur in this specific scenario.