In an FGCP active-passive HA cluster, what is the primary role of the standby FortiGate unit?

To process a portion of the traffic to offload the active unit

To terminate VPN tunnels for remote users while the active unit handles site-to-site traffic

To provide a backup configuration repository that is synced only on manual command

To monitor the active unit and take over its role upon failure

Which type of information is typically included in session synchronization between HA units?

Session table entries, including source/destination IPs and ports

The routing table of the active unit

The firmware version and patch level of the active unit

The full configuration file of the active unit

A FortiGate HA cluster is configured in active-passive mode. The active unit experiences a hardware failure and stops responding. What happens to the cluster?

The cluster stops forwarding traffic until the failed unit is replaced.

The standby unit detects the failure and becomes the new active unit.

The cluster automatically switches to active-active mode.

The cluster remains operational but with reduced capacity.

How does the standby unit in an FGCP active-passive cluster detect that the active unit has failed?

By waiting for the active unit to send a shutdown notification before taking over

By polling the active unit's management IP address using SNMP every 30 seconds

By sending periodic heartbeat packets over the HA link and monitoring for a response

By inspecting the active unit's routing table for changes via BGP updates

An administrator is configuring a new FGCP active-passive HA cluster. They want to ensure that if the active unit's WAN interface goes down, the standby unit takes over. What should they configure?

Increase the heartbeat interval.

Set the HA mode to active-active.

Enable session pickup and synchronize sessions.

Enable link failover and monitor the WAN interface.

FortinetNSE 7 - Enterprise Firewall Administrator

Domain 1Objective 3

Configure Different Operation Modes for an HA Cluster NSE7-ENTERPRISE-FIREWALL-ADMINISTRATOR Practice Questions (Page 2)

Part of the System Configuration domain, which makes up ~32% of our current practice bank. Fortinet does not publish an official question count, but from its 70-minute exam (~30–45 total, ~10–14 in this domain), expect 2–3 from this objective — we provide 17 practice questions to prepare you well beyond it. (estimate)

17questions here

4free pages

5concepts

Questions 6–10

6foundation · easy
In an FGCP active-passive HA cluster, what is the primary role of the standby FortiGate unit?
Select an answer first
7foundation · easy
Which type of information is typically included in session synchronization between HA units?
Select an answer first
8application · medium
A FortiGate HA cluster is configured in active-passive mode. The active unit experiences a hardware failure and stops responding. What happens to the cluster?
Select an answer first
9foundation · easy
How does the standby unit in an FGCP active-passive cluster detect that the active unit has failed?
Select an answer first
10application · medium
An administrator is configuring a new FGCP active-passive HA cluster. They want to ensure that if the active unit's WAN interface goes down, the standby unit takes over. What should they configure?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NSE7-ENTERPRISE-FIREWALL-ADMINISTRATOR

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Fortinet. “NSE7-ENTERPRISE-FIREWALL-ADMINISTRATOR” is a trademark of its owner, used for identification only.