ExamTopics Logo
Mail Us[email protected]
Menu
Palo-Alto-Networks Discussions
exam questions

Exam NGFW-Engineer All Questions

View all questions & answers for the NGFW-Engineer exam
Go to Exam

Exam NGFW-Engineer topic 1 question 19 discussion

Actual exam question from Palo Alto Networks's NGFW-Engineer
Question #: 19
Topic #: 1
[All NGFW-Engineer Questions]

In an active/active high availability (HA) configuration with two PA-Series firewalls, how do the firewalls use the HA3 interface?

  • A. To forward packets to the HA peer during session setup and asymmetric traffic flow
  • B. To exchange hellos, heartbeats, HA state information, and management plane synchronization for routing and User-ID information
  • C. To synchronize sessions, forwarding tables, IPSec security associations, and ARP tables between firewalls in an HA pair
  • D. To perform session cache synchronization among all HA peers having the same cluster ID
Show Suggested Answer Hide Answer
Suggested Answer: A 🗳️
by mirko1976 at May 8, 2025, 1:30 p.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
1318f4b
5 months, 3 weeks ago
Selected Answer: A
A is the correct answer.
upvoted 2 times
...
FandleFlox
6 months ago
Selected Answer: A
I dunno what they're thinking https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/high-availability/ha-concepts/ha-links-and-backup-links#:~:text=The%20firewalls%20use%20this%20link%20for%20forwarding%20packets%20to%20the%20peer%20during%20session%20setup%20and%20asymmetric%20traffic%20flow.
upvoted 2 times
...
Kick86
6 months, 1 week ago
Selected Answer: C
the HA3 interface is used for packet forwarding between the two firewalls. It's crucial for the firewalls to synchronize session tables and routing information to ensure consistent traffic processing.
upvoted 1 times
Eiffelsturm
4 days, 2 hours ago
that's done on the HA2 interface, which you also have in A/P
upvoted 1 times
...
...
mirko1976
6 months, 3 weeks ago
Selected Answer: A
A. To forward packets to the HA peer during session setup and asymmetric traffic flow The HA3 interface in an Active/Active High Availability (HA) configuration is primarily used to forward packets between firewalls during session setup and asymmetric traffic flows. Specifically, the HA3 link facilitates: Packet forwarding between Active/Active HA peers during session setup and asymmetric traffic flow. https://docs.paloaltonetworks.com/pan-os/11-1/pan-os-admin/high-availability/set-up-activeactive-ha/configure-activeactive-ha
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel