Palo Alto Networks Certified Network Security Engineer (PCNSE) — Question 468

Which conditions must be met when provisioning a high availability (HA) cluster? (Choose two.)

Answer options

• A. HA cluster members must be the same firewall model and run the same PAN-OS version.
• B. HA cluster members must share the same zone names.
• C. Panorama must be used to manage HA cluster members.
• D. Dedicated HA communication interfaces for the cluster must be used over HSCI interfaces.

Correct answer: A, B

Explanation

Option A is correct because HA cluster members indeed need to be of the same model and use the same PAN-OS version to ensure compatibility. Option B is also correct as sharing the same zone names is required for proper configuration. Options C and D are incorrect because while Panorama can be used, it is not a mandatory requirement, and the use of dedicated HA communication interfaces is not a strict condition.