Courseiva
Managing Troubleshooting and High AvailabilityeasyMultiple SelectObjective-mapped

PCNSE Practice Question: Managing Troubleshooting and High Availability

Which TWO conditions can cause an HA pair to show a state of 'suspended'?

⚠ Common exam trap

It's easy for candidates to assume that link failures only cause 'non-functional' states, but in the PCNSE exam, an HA1 link failure specifically triggers the 'suspended' state because the control link is down. Configuration synchronization failure is the other cause. Candidates may incorrectly think that HA2 link failure or license/version mismatches cause suspended state, but they do not.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

Configuration synchronization failure

A configuration synchronization failure causes the HA pair to enter a 'suspended' state. When configuration sync fails, the passive peer cannot apply the active peer's configuration, breaking the synchronization requirement for HA operation. The suspended state prevents the passive peer from taking over until the configuration mismatch is resolved.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • Software version mismatch between peers

    Why it's wrong here

    Version mismatch causes 'non-functional' state.

  • HA2 link failure

    Why it's wrong here

    HA2 failure does not impact HA state, only session sync.

  • License mismatch between peers

    Why it's wrong here

    License mismatch does not cause suspended state.

  • Configuration synchronization failure

    Why this is correct

    If config sync fails, firewall may suspend to avoid inconsistency.

  • HA1 link failure

    Why this is correct

    Loss of heartbeat can cause suspended state to prevent split-brain.

Visual reference

Client Recursive Resolver Root DNS (13 root servers) TLD DNS (.com, .org, …) Authoritative example.com query IP addr answer

About these practice questions

This PCNSE question is part of Courseiva's 504-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This PCNSE practice question is part of Courseiva's free Palo Alto Networks certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PCNSE exam.