What is the behavior of Defenders when the Console is unreachable during upgrades?

What is the behavior of Defenders when the Console is unreachable during upgrades?
A . Defenders continue to alert, but not enforce, using the policies and settings most recently cached before upgrading the Console.
B . Defenders will fail closed until the web-socket can be re-established.
C . Defenders will fail open until the web-socket can be re-established.
D . Defenders continue to alert and enforce using the policies and settings most recently cached before upgrading the Console.

View Answer

Answer: D

Explanation:

When the Console is unreachable during upgrades, Defenders continue to alert and enforce using the policies and settings most recently cached before the upgrade (option D). This behavior ensures that security enforcement remains active and consistent, even when the central management console is temporarily unavailable. The cached policies enable Defenders to maintain the security posture based on the last known configuration, ensuring continuous protection against threats and compliance with established security policies. This approach reflects Prisma Cloud’s design principle of ensuring uninterrupted security enforcement, thereby safeguarding the environment against potential vulnerabilities during maintenance periods.

Reference: https://docs.paloaltonetworks.com/prisma/prisma-cloud/20-09/prisma-cloud-compute-edition- admin/upgrade/upgrade_process.html