Palo Alto Networks Certified Network Security Engineer (PCNSE) — Question 584

An engineer is monitoring an active/active high availability (HA) firewall pair.

Which HA firewall state describes the firewall that is experiencing a failure of a monitored path?

Answer options

• A. Initial
• B. Passive
• C. Active-secondary
• D. Tentative

Correct answer: D

Explanation

The correct answer is D, Tentative, as this state indicates that the firewall is unable to communicate over a monitored path. The other options do not represent a failure condition: Initial refers to the startup state, Passive denotes a firewall that is not currently processing traffic, and Active-secondary describes a firewall that is in a standby role but not experiencing a failure.