Palo Alto Networks Certified Network Security Engineer (PCNSE) — Question 34

An administrator has been asked to configure active/passive HA for a pair of Palo Alto Networks NGFWs. The administrator assigns priority 100 to the active firewall.
Which priority is correct for the passive firewall?

Answer options

• A. 0
• B. 99
• C. 1
• D. 255

Correct answer: D

Explanation

In an active/passive HA configuration, the passive firewall should have a lower priority than the active one to ensure it remains in standby mode. Setting the passive firewall's priority to 255 ensures it will only take over if the active firewall fails, since 255 is the lowest priority level, allowing 100 to dominate.