Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location PL
Mob_nav_barsMENU

Palo Alto Networks Exam PCNSE Topic 2 Question 81 Discussion

Actual exam question for Palo Alto Networks's Palo Alto Networks Certified Security Engineer PAN-OS 11.0 exam
Question #: 81
Topic #: 2
[All Palo Alto Networks Certified Security Engineer PAN-OS 11.0 Questions]

When you import the configuration of an HA pair into Panorama, how do you prevent the import from affecting ongoing traffic?

Show Suggested Answer Hide Answer
Suggested Answer: B

To prevent the import from affecting ongoing traffic when you import the configuration of an HA pair into Panorama, you should disable config sync on both firewalls. Config sync is a feature that enables the firewalls in an HA pair to synchronize their configurations and maintain consistency. However, when you import the configuration of an HA pair into Panorama, you want to avoid any changes to the firewall configuration until you verify and commit the imported configuration on Panorama.Therefore, you should disable config sync before importing the configuration, and re-enable it after committing the changes on Panorama12.Reference:Migrate a Firewall HA Pair to Panorama Management, PCNSE Study Guide (page 50)


by Alisha at Feb 12, 2024, 07:59 AM

Limited Time Offer

25%

Off

Get Premium PCNSE Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel
Ben
4 months ago
I believe setting the passive link state to shutdown also helps in preventing traffic impact, so A) might be a good option too.
upvoted 0 times
...
Billi
4 months ago
Yeah, I think B) Disable config sync is the safest choice to avoid any disruptions.
upvoted 0 times
...
Micah
4 months ago
Interesting point, Staci. But I still think B) Disable config sync is the best option.
upvoted 0 times
...
Staci
4 months ago
I would go with D) Disable HA, that should also prevent any impact on ongoing traffic.
upvoted 0 times
...
Billi
4 months ago
I agree with Micah, disabling config sync makes sense to prevent traffic impact.
upvoted 0 times
...
Micah
5 months ago
I think the answer is B) Disable config sync.
upvoted 0 times
...
Alison
5 months ago
I think the best option is to disable config sync. That way, the configurations can be imported without any impact on the network operations.
upvoted 0 times
...
Charolette
5 months ago
But wouldn't disabling the HA2 link also work to prevent any impact on ongoing traffic?
upvoted 0 times
...
Lavelle
5 months ago
I agree with Michell. Disabling config sync should prevent the import from affecting ongoing traffic.
upvoted 0 times
...
Michell
6 months ago
I think the answer is B) Disable config sync.
upvoted 0 times
...
Gerald
6 months ago
Guys, let's not overthink this. I say we go with option A and set the passive link state to 'shutdown'. That seems like the simplest and most straightforward way to prevent the import from affecting traffic.
upvoted 0 times
...
Afton
6 months ago
Option C, disabling the HA2 link, could also work. That would prevent the imported config from being applied to the live system. But I'm not sure if that's the most elegant solution.
upvoted 0 times
Silva
6 months ago
D) Disable HA
upvoted 0 times
...
Laura
6 months ago
C) Disable the HA2 link
upvoted 0 times
...
Lelia
6 months ago
A) Set the passive link state to shutdown
upvoted 0 times
...
Kris
6 months ago
B) Disable config sync.
upvoted 0 times
...
...
Audra
6 months ago
I agree, this is a sensitive situation. I'm thinking option B, disabling config sync, might be the way to go. That way, we can import the new config without syncing it and causing any disruptions.
upvoted 0 times
...
Olive
6 months ago
Hmm, this question is tricky. We need to be really careful with HA configurations, especially when working with Panorama. Disrupting traffic is a big no-no, so we have to find a solution that doesn't affect ongoing operations.
upvoted 0 times
...

Save Cancel
az-700  pass4success  az-104  200-301  200-201  cissp  350-401  350-201  350-501  350-601  350-801  350-901  az-720  az-305  pl-300  

Warning: Cannot modify header information - headers already sent by (output started at /pass.php:70) in /pass.php on line 77