PCNSC Palo Alto Networks Certified Network Security Consultant Questions and Answers

the active firewall, which then synchronizes to the passive firewall

the passive firewall, which then synchronizes to the active firewall

both the active and passive firewalls independently, with no synchronization afterward

both the active and passive firewalls, which then synchronizes with each other

Using the name user's corporate username and password.

First four lettersof the username matching any valid corporate username.

Matching any valid corporate username.

Mapping to the IP address of the logged-in user.

Configuration synchronization

Virtual link

active/passive deployment

session synchronization

synchronization of IPsec security associations

0

1

90

255

Glovbalprotect version 4.0 with PAn-OS 8.0

Glovbalprotect version 4.1 with PAn-OS8.1

Glovbalprotect version 4.0 with PAn-OS 8.1

Glovbalprotect version 4.1 with PAn-OS 8.0

after the SSL Proxy re-encrypts the packet

before the packet forwarding process

after the application has been identified

before session lookup

Option A

Option B

Option C

Option D

The firewall do not use floating IPs in active/active HA.

The two firewalls will share a single floating IP and will use gratuitous ARP to share the floating IP.

The firewalls will share the sameinterface IP address, and device 1 will use the floating IP if device 0 fails.

Each firewall will have a separate floating IP. and priority will determine which firewall has the primary IP.