Configure FortiGate Clustering Protocol (FGCP) High-Availability (HA) Cluster NSE4-FORTIOS-ADMINISTRATOR Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   What is the primary purpose of session synchronization in an FGCP HA cluster?

   • ATo ensure that all devices have the same configuration
   • BTo load balance traffic across multiple devices
   • CTo provide a backup of the configuration for disaster recovery
   • DTo maintain stateful sessions across a failover so that existing connections are not dropped
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A company runs a critical application that maintains long-lived TCP sessions (e.g., database connections) through a FortiGate HA cluster. The administrator wants to ensure that these sessions are not dropped during a failover. The application uses a fixed source port and the sessions are expected to last for hours. Which configuration is most important to guarantee session continuity?

   • AEnable 'failover-monitor' on the primary interface to detect link failure faster.
   • BSet the HA 'session-pickup' option to 'enable' on the secondary unit.
   • CIncrease the 'failover threshold' to 10 to avoid unnecessary failovers.
   • DEnable session synchronization on the HA cluster and ensure the session-ttl is set to 'deviation'.
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A FortiGate HA cluster has been running for several months. The administrator notices that the 'sessions' counter on the secondary unit is significantly lower than on the primary. The cluster is in active-passive mode. What is the most likely cause of this discrepancy?

   • AThe secondary unit has a lower priority and therefore does not store sessions.
   • BThe secondary unit is not receiving any traffic, so it naturally has fewer sessions.
   • CSession synchronization is not working correctly, so the secondary does not have a complete copy of the session table.
   • DThe session-ttl is set to 'fixed', causing sessions to expire on the secondary.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A company is deploying two FortiGate 200F devices in an active-passive HA cluster. The network team has assigned a dedicated management subnet (10.10.10.0/24) and wants to ensure that the heartbeat traffic never traverses the production data path. The FortiGates have four 10GbE interfaces (port1-port4) and two 1GbE interfaces (port5-port6). Port1 and port2 connect to the upstream switch, port3 and port4 connect to the downstream switch, and port5 and port6 are unused. Which interface configuration should the administrator use for the HA heartbeat?

   • AUse port1 and port2 as heartbeat interfaces, since they are 10GbE and provide higher bandwidth for session synchronization.
   • BUse port5 and port6 as dedicated heartbeat interfaces, connecting them directly between the two FortiGates with a crossover cable.
   • CUse port3 and port4 as heartbeat interfaces, since they connect to the downstream switch where the clients reside.
   • DUse a single heartbeat interface (port5) and configure the other (port6) as a regular port for future use.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   What does the 'synchronization status' in the HA status output indicate?

   • AWhether the configuration is synchronized between cluster members
   • BWhether the device is up to date with the primary's configuration and session table
   • CThe current priority value of the device
   • DThe number of heartbeat packets sent and received
   Reveal Solution Discussion Select an answer first