PCSFE practice question 15 of 15
Which two design options address split brain when configuring high availability (HA)? (Choose two.)
Full set: 65 questionsThe two design options that address split brain when configuring high availability (HA) are: Adding a backup HA1 interface Using the heartbeat backup Split brain is a condition that occurs when both firewalls in an HA pair assume the active role and start processing traffic independently, resulting in traffic duplication, policy inconsistency, or session disruption. Split brain can be caused by network failures, device failures, or configuration errors that prevent the firewalls from communicating their HA status and synchronizing their configurations and sessions. Adding a backup HA1 interface is a design option that addresses split brain when configuring HA. The HA1 interface is used for exchanging HA state information and configuration synchronization between the firewalls. Adding a backup HA1 interface provides redundancy and failover protection for the HA1 interface, ensuring that the firewalls can maintain their HA communication and avoid split brain. Using the heartbeat backup is a design option that addresses split brain when configuring HA. The heartbeat backup is a mechanism that allows the firewalls to send additional heartbeat messages through an alternate path, such as a management interface or a data interface, to verify the health of the peer firewall. Using the heartbeat backup prevents split brain caused by network failures or device failures that affect the primary HA interfaces. Bundling multiple interfaces in an aggregated interface group and assigning HA2, and sending heartbeats across the HA2 interfaces are not design options that address split brain when configuring HA, but they are related features that can enhance performance and reliability. Reference: Palo Alto Networks Certified Software Firewall Engineer (PCSFE), [High Availability Overview], [Configure HA Backup Links], [Configure Heartbeat Backup]
Keep practicing
Take the free PCSFE practice test
Ten exam-style questions with answers and explanations, plus the exam facts and study guides.
More questions
Other PCSFE practice questions
- Question 1Which three NSX features can be pushed from Panorama in PAN-OS? (Choose three.)
- Question 2Which two deployment modes of VM-Series firewalls are supported across NSX-T? (Choose two…
- Question 3Which offering can gain visibility and prevent an attack by a malicious actor attempting …
- Question 4What must be enabled when using Terraform templates with a Cloud next-generation firewall…
- Question 5What is required to integrate a Palo Alto Networks VM-Series firewall with Azure Orchestr…
- Question 6Which solution is best for securing an EKS environment?
