PCNSE Core Concepts and Architecture Practice Question
Which TWO of the following are mandatory requirements for forming an active/passive HA pair between two Palo Alto Networks firewalls? (Choose exactly two.)
⚠ Common exam trap
Test-takers frequently confuse 'same hardware model' with 'same number of active VLANs' or 'identical licenses,' but Palo Alto Networks only mandates hardware model and PAN-OS version match for HA formation, not configuration or licensing details.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Both firewalls must be the same hardware model.
For an active/passive HA pair, both firewalls must be the same hardware model to ensure identical hardware resources (e.g., CPU, memory, ASICs) and port layouts. This is a mandatory requirement because the HA synchronization process relies on matching hardware capabilities to avoid configuration mismatches and failover failures.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Both firewalls must be the same hardware model.
Why this is correct
Different models are not compatible for HA.
- ✗
Both firewalls must have the same number of active VLANs.
Why it's wrong here
VLAN count does not affect HA formation.
- ✓
Both firewalls must run the same PAN-OS version.
Why this is correct
Version mismatch is not allowed for HA.
- ✗
Both firewalls must use the same management interface IP address.
Why it's wrong here
Management IPs must be unique, and will be different.
- ✗
Both firewalls must have identical license subscriptions.
Why it's wrong here
Licenses can differ; HA synchronization works regardless, but features may not be available if not licensed.
Go deeper
Related to this question
About these practice questions
Courseiva writes every PCNSE question from scratch — 504 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This PCNSE practice question is part of Courseiva's free Palo Alto Networks certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PCNSE exam.