PCNSE Practice Question: Managing Troubleshooting and High Availability
An HA pair experiences split-brain after a brief network outage. Both firewalls become active and each starts forwarding traffic. What is the most effective way to prevent this in the future?
⚠ Common exam trap
Candidates often confuse increasing the failover threshold with making HA less reliable, when in fact it adds tolerance to temporary network blips, preventing the split-brain condition that occurs when both firewalls assume the other is dead.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Increase the HA keepalive failover threshold to tolerate temporary packet loss
Increasing the HA keepalive failover threshold allows the firewalls to tolerate a brief network outage without triggering a split-brain scenario. By requiring more missed heartbeats before declaring the peer dead, the firewalls avoid both becoming active simultaneously due to transient packet loss. This directly addresses the root cause—premature failover during temporary connectivity issues.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Increase the HA keepalive failover threshold to tolerate temporary packet loss
Why this is correct
Higher threshold allows brief outage without triggering failover.
- ✗
Decrease the HA1 hello interval
Why it's wrong here
Faster hello would make it more sensitive, not less.
- ✗
Enable link monitoring on all interfaces
Why it's wrong here
Link monitoring triggers failover on interface down, not split-brain prevention.
- ✗
Increase the session synchronization rate
Why it's wrong here
Session sync does not affect failover timing.
Go deeper
Related to this question
About these practice questions
Courseiva writes every PCNSE question from scratch — 504 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This PCNSE practice question is part of Courseiva's free Palo Alto Networks certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PCNSE exam.