Exam NetSec-Pro Topic 3 Question 10 Discussion

Actual exam question for Palo Alto Networks's NetSec-Pro exam
Question #: 10
Topic #: 3
Which component of NGFW is supported in active/passive design but not in active/active design?

Suggested Answer: A Vote an answer

Single floating IP address (also known as a floating IP or shared IP) is supported only in an active/passive HA pair. In active/active HA, both firewalls are forwarding traffic simultaneously and thus do not share a single floating IP.
In active/passive HA, a single floating IP address is used for seamless failover. Active/active HA requires separate IP addresses and does not support a single floating IP.
This simplifies failover in active/passive deployments by using a single shared IP that moves to the active peer upon failover.

by Payne at Jul 13, 2026, 11:15 AM

Limited Time Offer

15%

Off

Get Premium NetSec-Pro Questions as Interactive Self Test Engine or PDF

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Nick name: Submit Cancel
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
0
0
0
10