Correct Answer B C & D
HA Lite is an active/passive deployment that provides configuration synchronization and some run-time data synchronization such as IPsec security associations. It does not support session synchronization (HA2), and therefore does not offer stateful failover.
Note that HA Lite is not present in PAN 10: Compare 8.1 and 10 docs here: https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-admin/high-availability/ha-concepts/ha-modes.html
Correct Answer B C & D
HA Lite is an active/passive deployment that provides configuration synchronization and some run-time data synchronization such as IPsec security associations. It does not support session synchronization (HA2), and therefore does not offer stateful failover.
IPSec SAs and IKE SAs (both phase 1 and phase 2) are not synchronized between HA peers. This is because IPSec Security Associations are dynamically established and include unique session keys and parameters negotiated during the IKE handshake.
BCD
HA-Lite offers the following capabilities:
A/P High Availability without session sync
Failover of IPSec Tunnels (sessions must be re-established)
DHCP Lease information
PPPoE lease information
Configuration sync
Layer 3 forwarding tables
BCD are the correct answers
The PA-200 (a discontinued model) firewall supports HA Lite only. HA Lite is an active/passive deployment that provides configuration synchronization and some run-time data synchronization such as IPsec security associations. It does not support session synchronization (HA2), and therefore does not offer stateful failover.
upvoted 4 times
...
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Silent_Sanctuary
Highly Voted 4 years, 7 months agoeyelasers1
2 years, 10 months agoduckduckgooo
1 year, 10 months agokewokil120
Most Recent 3 weeks, 6 days agoEmanc21
2 months, 2 weeks agoMarshpillowz
11 months, 4 weeks agoSarbi
2 years agoDenskyDen
2 years agosecdaddy
2 years, 3 months agoshinichi_88
2 years, 11 months agoaadach
3 years, 9 months agoaadach
3 years, 9 months agommed
3 years, 10 months agolol1000
4 years, 2 months agocybermate
4 years, 7 months ago