Palo Alto Networks Certified Network Security Engineer (PCNSE) — Question 307

Which states will a pair of firewalls be in if their HA Group ID is mismatched?

Answer options

• A. Active/Non-functional
• B. Active/Passive
• C. Init/Init
• D. Active/Active

Correct answer: A

Explanation

When the HA Group ID of two firewalls is mismatched, they cannot synchronize properly, leading to one being active while the other is non-functional. The other options describe different states that can occur when configurations are correct, but in the case of a mismatch, the only viable status is Active/Non-functional.