Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Palo Alto Networks Exam PCNSE Topic 2 Question 81 Discussion

Actual exam question for Palo Alto Networks's Palo Alto Networks Certified Security Engineer PAN-OS 11.0 exam
Question #: 81
Topic #: 2
[All Palo Alto Networks Certified Security Engineer PAN-OS 11.0 Questions]

When you import the configuration of an HA pair into Panorama, how do you prevent the import from affecting ongoing traffic?

Show Suggested Answer Hide Answer
Suggested Answer: B

To prevent the import from affecting ongoing traffic when you import the configuration of an HA pair into Panorama, you should disable config sync on both firewalls. Config sync is a feature that enables the firewalls in an HA pair to synchronize their configurations and maintain consistency. However, when you import the configuration of an HA pair into Panorama, you want to avoid any changes to the firewall configuration until you verify and commit the imported configuration on Panorama.Therefore, you should disable config sync before importing the configuration, and re-enable it after committing the changes on Panorama12.Reference:Migrate a Firewall HA Pair to Panorama Management, PCNSE Study Guide (page 50)


by Alisha at Feb 12, 2024, 07:59 AM

Limited Time Offer

25%

Off

Get Premium PCNSE Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel
Michell
2 days ago
I think the answer is B) Disable config sync.
upvoted 0 times
...
Gerald
24 days ago
Guys, let's not overthink this. I say we go with option A and set the passive link state to 'shutdown'. That seems like the simplest and most straightforward way to prevent the import from affecting traffic.
upvoted 0 times
...
Afton
25 days ago
Option C, disabling the HA2 link, could also work. That would prevent the imported config from being applied to the live system. But I'm not sure if that's the most elegant solution.
upvoted 0 times
Silva
9 days ago
D) Disable HA
upvoted 0 times
...
Laura
10 days ago
C) Disable the HA2 link
upvoted 0 times
...
Lelia
11 days ago
A) Set the passive link state to shutdown
upvoted 0 times
...
Kris
12 days ago
B) Disable config sync.
upvoted 0 times
...
...
Audra
26 days ago
I agree, this is a sensitive situation. I'm thinking option B, disabling config sync, might be the way to go. That way, we can import the new config without syncing it and causing any disruptions.
upvoted 0 times
...
Olive
27 days ago
Hmm, this question is tricky. We need to be really careful with HA configurations, especially when working with Panorama. Disrupting traffic is a big no-no, so we have to find a solution that doesn't affect ongoing operations.
upvoted 0 times
...

Save Cancel