Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Palo Alto Networks Exam PCNSE Topic 2 Question 81 Discussion

Actual exam question for Palo Alto Networks's PCNSE exam
Question #: 81
Topic #: 2
[All PCNSE Questions]

When you import the configuration of an HA pair into Panorama, how do you prevent the import from affecting ongoing traffic?

Show Suggested Answer Hide Answer
Suggested Answer: B

To prevent the import from affecting ongoing traffic when you import the configuration of an HA pair into Panorama, you should disable config sync on both firewalls. Config sync is a feature that enables the firewalls in an HA pair to synchronize their configurations and maintain consistency. However, when you import the configuration of an HA pair into Panorama, you want to avoid any changes to the firewall configuration until you verify and commit the imported configuration on Panorama.Therefore, you should disable config sync before importing the configuration, and re-enable it after committing the changes on Panorama12.Reference:Migrate a Firewall HA Pair to Panorama Management, PCNSE Study Guide (page 50)


by Alisha at Feb 12, 2024, 07:59 AM

Limited Time Offer

25%

Off

Get Premium PCNSE Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel
Ben
11 months ago
I believe setting the passive link state to shutdown also helps in preventing traffic impact, so A) might be a good option too.
upvoted 0 times
...
Billi
12 months ago
Yeah, I think B) Disable config sync is the safest choice to avoid any disruptions.
upvoted 0 times
...
Micah
1 years ago
Interesting point, Staci. But I still think B) Disable config sync is the best option.
upvoted 0 times
...
Staci
1 years ago
I would go with D) Disable HA, that should also prevent any impact on ongoing traffic.
upvoted 0 times
...
Billi
1 years ago
I agree with Micah, disabling config sync makes sense to prevent traffic impact.
upvoted 0 times
...
Micah
1 years ago
I think the answer is B) Disable config sync.
upvoted 0 times
...
Alison
1 years ago
I think the best option is to disable config sync. That way, the configurations can be imported without any impact on the network operations.
upvoted 0 times
...
Charolette
1 years ago
But wouldn't disabling the HA2 link also work to prevent any impact on ongoing traffic?
upvoted 0 times
...
Lavelle
1 years ago
I agree with Michell. Disabling config sync should prevent the import from affecting ongoing traffic.
upvoted 0 times
...
Michell
1 years ago
I think the answer is B) Disable config sync.
upvoted 0 times
...
Gerald
1 years ago
Guys, let's not overthink this. I say we go with option A and set the passive link state to 'shutdown'. That seems like the simplest and most straightforward way to prevent the import from affecting traffic.
upvoted 0 times
...
Afton
1 years ago
Option C, disabling the HA2 link, could also work. That would prevent the imported config from being applied to the live system. But I'm not sure if that's the most elegant solution.
upvoted 0 times
Silva
1 years ago
D) Disable HA
upvoted 0 times
...
Laura
1 years ago
C) Disable the HA2 link
upvoted 0 times
...
Lelia
1 years ago
A) Set the passive link state to shutdown
upvoted 0 times
...
Kris
1 years ago
B) Disable config sync.
upvoted 0 times
...
...
Audra
1 years ago
I agree, this is a sensitive situation. I'm thinking option B, disabling config sync, might be the way to go. That way, we can import the new config without syncing it and causing any disruptions.
upvoted 0 times
...
Olive
1 years ago
Hmm, this question is tricky. We need to be really careful with HA configurations, especially when working with Panorama. Disrupting traffic is a big no-no, so we have to find a solution that doesn't affect ongoing operations.
upvoted 0 times
...

Save Cancel