Configure FortiGate Clustering Protocol (FGCP) High-Availability (HA) Cluster NSE4-FORTIOS-ADMINISTRATOR Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   An organization has an HA cluster of two FortiGates. The administrator wants to manage the cluster through a single IP address for GUI and SSH access, without exposing the management interface to the production network. The management network is on a separate VLAN (VLAN 100). Which configuration should be used?

   • AConfigure a dedicated HA management interface on a port assigned to VLAN 100 and assign a floating IP address.
   • BConfigure a virtual IP (VIP) on the production interface and use it for management.
   • CAssign the management IP to the HA heartbeat interface.
   • DUse the primary unit's IP address for management and connect to the secondary using its own IP if the primary fails.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   What is the purpose of the heartbeat interface in an FGCP HA cluster?

   • ATo carry user data traffic between the cluster and the network
   • BTo provide a dedicated link for cluster members to exchange health and synchronization information
   • CTo connect the cluster to the internet for firmware updates
   • DTo allow administrators to manage the cluster remotely
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   What is the purpose of the 'preempt' setting in an FGCP HA cluster?

   • ATo force the device with the highest priority to become the primary when it recovers
   • BTo allow a secondary device to take over the primary role if the primary fails
   • CTo increase the failover threshold to avoid unnecessary failovers
   • DTo prevent a device from becoming the primary under any circumstances
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   An organization has an HA cluster of two FortiGates. The administrator wants to manage the cluster via a single IP address. The management network is on a separate VLAN (VLAN 100). The administrator has configured the HA management interface on a port assigned to VLAN 100 and assigned a floating IP. However, the administrator cannot access the cluster via the floating IP. What is the most likely cause?

   • AThe HA management interface must be on the same subnet as the heartbeat interface.
   • BThe HA management interface is only accessible from the primary unit.
   • CThe floating IP must be in the same subnet as the management interface's IP.
   • DThe HA management interface must be configured on the same port as the heartbeat interface.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   What is the primary purpose of a FortiGate Clustering Protocol (FGCP) high-availability cluster?

   • ATo combine the processing power of multiple FortiGate devices for increased throughput
   • BTo distribute network traffic across multiple FortiGate devices for load balancing
   • CTo allow multiple FortiGate devices to be managed from a single management interface
   • DTo provide redundancy so that if the primary device fails, a secondary device takes over with minimal disruption
   Reveal Solution Discussion Select an answer first