What is the role of the primary unit in an FGCP active-active cluster?

It processes all traffic while the secondary unit only handles management traffic

It manages the cluster, including configuration synchronization and coordinating failover

It acts as a dedicated logging server for all other cluster members

It only handles traffic for specific VLANs while the secondary handles the rest

In an FGCP active-active HA cluster, how is traffic load shared between the FortiGate units?

Traffic is split evenly by packet count, with each unit processing every other packet

Traffic is distributed based on the source IP address using ECMP routing

Traffic is distributed between units based on a load-balancing algorithm that uses session information

All traffic is processed by the primary unit, and the secondary unit only takes over on failure

A company runs two FortiGates in an FGCP active-active HA cluster. They want to ensure that if the primary unit fails, the secondary unit can continue to handle all traffic without interruption. What must be configured?

Session synchronization and failover settings

Virtual clustering and load balancing

Link failover and heartbeat monitoring

An organization has two FortiGates in an FGCP active-active HA cluster. They notice that the primary unit handles more traffic than the secondary unit, and they want to ensure that both units share the load more evenly. What should they configure to achieve this?

Increase the heartbeat interval to reduce the overhead on the primary unit.

Set the HA mode to active-passive to ensure only one unit processes traffic.

Enable session synchronization and ensure the load-balancing algorithm is set to a hash-based method.

Disable session synchronization to allow each unit to handle its own sessions independently.

A company runs a pair of FortiGates in an FGCP active-passive HA cluster. The network team notices that when the active unit fails, the standby unit takes over, but existing TCP sessions are dropped and clients must reconnect. The cluster is configured with default HA settings. Which configuration change would allow existing sessions to survive the failover?

Enable session pickup and configure session synchronization between the HA members.

Change the HA mode to active-active to distribute sessions across both units.

Increase the HA heartbeat interval to reduce the failover detection time.

Configure the HA cluster to use a virtual cluster with two virtual cluster IDs.

FortinetNSE 7 - Enterprise Firewall Administrator

Domain 1Objective 3

Configure Different Operation Modes for an HA Cluster NSE7-ENTERPRISE-FIREWALL-ADMINISTRATOR Practice Questions (Page 3)

Part of the System Configuration domain, which makes up ~32% of our current practice bank. Fortinet does not publish an official question count, but from its 70-minute exam (~30–45 total, ~10–14 in this domain), expect 2–3 from this objective — we provide 17 practice questions to prepare you well beyond it. (estimate)

17questions here

4free pages

5concepts

Questions 11–15

11foundation · easy
What is the role of the primary unit in an FGCP active-active cluster?
Select an answer first
12foundation · easy
In an FGCP active-active HA cluster, how is traffic load shared between the FortiGate units?
Select an answer first
13application · medium
A company runs two FortiGates in an FGCP active-active HA cluster. They want to ensure that if the primary unit fails, the secondary unit can continue to handle all traffic without interruption. What must be configured?
Select an answer first
14application · medium
An organization has two FortiGates in an FGCP active-active HA cluster. They notice that the primary unit handles more traffic than the secondary unit, and they want to ensure that both units share the load more evenly. What should they configure to achieve this?
Select an answer first
15application · medium
A company runs a pair of FortiGates in an FGCP active-passive HA cluster. The network team notices that when the active unit fails, the standby unit takes over, but existing TCP sessions are dropped and clients must reconnect. The cluster is configured with default HA settings. Which configuration change would allow existing sessions to survive the failover?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NSE7-ENTERPRISE-FIREWALL-ADMINISTRATOR

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Fortinet. “NSE7-ENTERPRISE-FIREWALL-ADMINISTRATOR” is a trademark of its owner, used for identification only.