Palo Alto Networks Certified Network Security Engineer (PCNSE) — Question 538

Which three use cases are valid reasons for requiring an Active/Active high availability deployment? (Choose three.)

Answer options

• A. The environment requires real full-time redundancy from both firewalls at all times.
• B. The environment requires that traffic be load-balanced across both firewalls to handle peak traffic spikes.
• C. The environment requires Layer 2 interfaces in the deployment.
• D. The environment requires that all configuration must be fully synchronized between both members of the HA pair.
• E. The environment requires that both firewalls maintain their own routing tables for faster dynamic routing protocol convergence.

Correct answer: A, D, E

Explanation

The correct answers A, D, and E highlight essential aspects of an Active/Active deployment. A ensures full redundancy, D focuses on the necessity for synchronized configurations, and E addresses the need for independent routing tables. Option B is incorrect as load balancing is typically associated with Active/Passive setups, while C is not a requirement for Active/Active configurations.