Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Palo Alto Networks Exam PCNSE Topic 2 Question 81 Discussion

Actual exam question for Palo Alto Networks's PCNSE exam
Question #: 81
Topic #: 2
[All PCNSE Questions]

When you import the configuration of an HA pair into Panorama, how do you prevent the import from affecting ongoing traffic?

Show Suggested Answer Hide Answer
Suggested Answer: B

To prevent the import from affecting ongoing traffic when you import the configuration of an HA pair into Panorama, you should disable config sync on both firewalls. Config sync is a feature that enables the firewalls in an HA pair to synchronize their configurations and maintain consistency. However, when you import the configuration of an HA pair into Panorama, you want to avoid any changes to the firewall configuration until you verify and commit the imported configuration on Panorama.Therefore, you should disable config sync before importing the configuration, and re-enable it after committing the changes on Panorama12.Reference:Migrate a Firewall HA Pair to Panorama Management, PCNSE Study Guide (page 50)


by Alisha at Feb 12, 2024, 07:59 AM

Limited Time Offer

25%

Off

Get Premium PCNSE Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel
Ben
10 months ago
I believe setting the passive link state to shutdown also helps in preventing traffic impact, so A) might be a good option too.
upvoted 0 times
...
Billi
10 months ago
Yeah, I think B) Disable config sync is the safest choice to avoid any disruptions.
upvoted 0 times
...
Micah
10 months ago
Interesting point, Staci. But I still think B) Disable config sync is the best option.
upvoted 0 times
...
Staci
10 months ago
I would go with D) Disable HA, that should also prevent any impact on ongoing traffic.
upvoted 0 times
...
Billi
10 months ago
I agree with Micah, disabling config sync makes sense to prevent traffic impact.
upvoted 0 times
...
Micah
10 months ago
I think the answer is B) Disable config sync.
upvoted 0 times
...
Alison
11 months ago
I think the best option is to disable config sync. That way, the configurations can be imported without any impact on the network operations.
upvoted 0 times
...
Charolette
11 months ago
But wouldn't disabling the HA2 link also work to prevent any impact on ongoing traffic?
upvoted 0 times
...
Lavelle
11 months ago
I agree with Michell. Disabling config sync should prevent the import from affecting ongoing traffic.
upvoted 0 times
...
Michell
11 months ago
I think the answer is B) Disable config sync.
upvoted 0 times
...
Gerald
1 years ago
Guys, let's not overthink this. I say we go with option A and set the passive link state to 'shutdown'. That seems like the simplest and most straightforward way to prevent the import from affecting traffic.
upvoted 0 times
...
Afton
1 years ago
Option C, disabling the HA2 link, could also work. That would prevent the imported config from being applied to the live system. But I'm not sure if that's the most elegant solution.
upvoted 0 times
Silva
12 months ago
D) Disable HA
upvoted 0 times
...
Laura
12 months ago
C) Disable the HA2 link
upvoted 0 times
...
Lelia
12 months ago
A) Set the passive link state to shutdown
upvoted 0 times
...
Kris
12 months ago
B) Disable config sync.
upvoted 0 times
...
...
Audra
1 years ago
I agree, this is a sensitive situation. I'm thinking option B, disabling config sync, might be the way to go. That way, we can import the new config without syncing it and causing any disruptions.
upvoted 0 times
...
Olive
1 years ago
Hmm, this question is tricky. We need to be really careful with HA configurations, especially when working with Panorama. Disrupting traffic is a big no-no, so we have to find a solution that doesn't affect ongoing operations.
upvoted 0 times
...

Save Cancel