Palo Alto Networks Certified Network Security Engineer (PCNSE) — Question 492

What happens when an A/P firewall pair synchronizes IPsec tunnel security associations (SAs)?

Answer options

• A. Phase 2 SAs are synchronized over HA2 links.
• B. Phase 1 and Phase 2 SAs are synchronized over HA2 links.
• C. Phase 1 SAs are synchronized over HA1 links.
• D. Phase 1 and Phase 2 SAs are synchronized over HA3 links.

Correct answer: A

Explanation

The correct answer is A, as Phase 2 SAs are specifically synchronized over HA2 links between the firewalls. Options B, C, and D are incorrect because they either include Phase 1 SAs, which are not synchronized over HA2 links, or incorrectly state the link types used for synchronization.