Palo Alto Networks Certified Network Security Engineer (PCNSE) — Question 350

What is the best description of the Cluster Synchronization Timeout (min)?

Answer options

• A. The maximum interval between hello packets that are sent to verify that the HA functionality on the other firewall is operational
• B. The maximum time that the local firewall waits before going to Active state when another cluster member is preventing the cluster from fully synchronizing
• C. The timeframe within which the firewall must receive keepalives from a cluster member to know that the cluster member is functional
• D. The time that a passive or active-secondary firewall will wait before taking over as the active or active-primary firewall

Correct answer: B

Explanation

The correct answer is B because it accurately describes how long the local firewall waits before it transitions to the Active state if synchronization is blocked by another member. Option A describes hello packets, which are not related to the timeout duration for state changes. Option C refers to keepalives, and option D discusses the waiting period for a firewall to take over, which is not the same as the synchronization timeout definition.