HA II

Question 1 of 21

1

The cluster assigns virtual IP addresses to heartbeat interfaces based on each FortiGate’s serial number, what subnet use?

Select one of the following:

169.254.0.0
254.169.0.0
169.0.254.0
254.0.169.0

Explanation

Question 2 of 21

1

FortiGates keep their heartbeat virtual IP addresses regardless of any change in their role (primary or secondary).:
- The IP address assignment changes only when a FortiGate leaves or joins cluster.

Select one of the following:

True
False

Explanation

Question 3 of 21

1

Heartbeat communication can be enabled for physical interfaces, but not for: (Select 5)

Select one or more of the following:

VLAN subinterfaces
lPsec VPN interfaces
redundant interfaces
802.3ad aggregate interfaces
FortiGate switch ports
Software switch interfaces
InterVDOM link interfaces

Explanation

Question 4 of 21

1

As a best practice, in the moment a cluster is up and running and all interfaces are connected is recommended enabling interface monitoring. A monitored interface can easily become disconnected during initial setup and cause failovers to occur before the cluster is fully conﬁgured and tested.

Select one of the following:

True
False

Explanation

Question 5 of 21

1

Incremental synchronization:

After the initial synchronization is complete, the primary will send any further conﬁguration changes done by an administrator to all the secondaries. For example, if you create a ﬁrewall address object, the primary doesn't resend its complete conﬁguration, it sends just the new object.

Select one of the following:

True
False

Explanation

Question 6 of 21

1

When a new FortiGate is added to the cluster, the primary FortiGate compares its conﬁguration checksum with the new secondary FortiGate conﬁguration checksum. If the checksums don't match, the primary FortiGate uploads its complete conﬁguration to the secondary FortiGate.

Select one of the following:

True
False

Explanation

Question 7 of 21

1

Types of HA sync

Select one of the following:

Complete synchronization
Incremental synchronization
Total synchronization
Incremental synchronization

Explanation

Question 8 of 21

1

How many second check the cluster that all devices are synchronized:

Select one of the following:

60
10
15

Explanation

Question 9 of 21

1

If any secondary is out of sync, the checksum of secondary devices is then checked every

Select one of the following:

15 seconds.
60 seconds.
5 seconds.

Explanation

Question 10 of 21

1

If checksums don't match for ﬁve consecutive checks:

Select one of the following:

a complete re-synchronization is done.
a incremental re-synchronization is done.

Explanation

Question 11 of 21

1

Not all the conﬁguration settings are synchronized. There are a few that are not, such as:

- The system interface settings of the HA reserved management interface and the HA default route for the reserved management interface
- In-band HA management interface
- HA override
- HA device priority
- The virtual cluster priority
- The FortiGate host name
- The HA priority setting for a ping server (or dead gateway detection) conﬁguration
- Licenses
- Caches

Select one of the following:

True
False

Explanation

Question 12 of 21

1

Session synchronization:
The synchronization of SSL VPN sessions is supported.

Select one of the following:

True
False

Explanation

Question 13 of 21

1

Session synchronization (Select 4)

Select one or more of the following:

TCP Session
IPsec VPN session
UDP and ICMP session
Multicast session
SSL VPN session
HA session
FGCP session

Explanation

Question 14 of 21

1

What information is synchronized between two FortiGate devices that belong to the same HA cluster?

Select one of the following:

a. Firewall policies and objects
b. FortiGate hostname

Explanation

Question 15 of 21

1

Which one of the following session types can be synchronized in an HA cluster?

Select one of the following:

a. SSL VPN sessions
b. IPsec VPN sessions

Explanation

Question 16 of 21

1

❌ is basically triggered when the primary FortiGate stops sending heartbeat trafﬁc. When this happens, the secondaries renegotiate a new primary.

❌ occurs when the link status of a monitored interface on the primary FortiGate goes down. You can conﬁgure an HA cluster to monitor the link status of some interfaces. If a monitored interface on the primary FortiGate is unplugged, or its link status goes down, a new primary FortiGate is elected.

Drag and drop to complete the text.

A device failover

A link failover

Explanation

Question 17 of 21

1

Virtual MAC Addresses and Failover

Select one of the following:

On the primary, each interface is assigned a virtual MAC address.

HA heartbeat interfaces are not assigned a virtual MAC address.

Upon failover, the newly elected primary adopts the same virtual MAC addresses as the former primary.
On the primary, only one interface is assigned a virtual MAC address.

HA heartbeat interfaces have a assigned virtual MAC address.

Upon failover, the newly elected primary adopts a new virtual MAC addresses as the former primary.

Explanation

Question 18 of 21

1

You can conﬁgure virtual clustering between with two or more FortiGate´s devices with multiple VDOMs.

Select one of the following:

True
False

Explanation

Question 19 of 21

1

A HA failover occurs when the link status of a monitored interface on the goes down.

Select one of the following:

a. primary FortiGate
b. secondary FortiGate

Explanation

Question 20 of 21

1

The heartbeat interface IP address 169.254.0.1 is assigned to which FortiGate in an HA cluster?

Select one of the following:

a. The FortiGate with the highest serial number
b. The FortiGate with the highest priority

Explanation

Question 21 of 21

1

Which of the following statements about the firmware upgrade process on an HA cluster is true?

Select one of the following:

a. You only need to upload the new ﬁrmware to the primary FortiGate to upgrade an HA cluster.
b. The cluster members are not rebooted.

	Created by Marcos Avila almost 6 years ago

NSE4 6.0 NSE4 6.0 Quiz on HA II, created by Marcos Avila on 01/08/2018.

Question 1 of 21

The cluster assigns virtual IP addresses to heartbeat interfaces based on each FortiGate’s serial number, what subnet use?

Select one of the following:

Explanation

Question 2 of 21

FortiGates keep their heartbeat virtual IP addresses regardless of any change in their role (primary or secondary).: - The IP address assignment changes only when a FortiGate leaves or joins cluster.

Select one of the following:

Explanation

Question 3 of 21

Heartbeat communication can be enabled for physical interfaces, but not for: (Select 5)

Select one or more of the following:

Explanation

Question 4 of 21

As a best practice, in the moment a cluster is up and running and all interfaces are connected is recommended enabling interface monitoring. A monitored interface can easily become disconnected during initial setup and cause failovers to occur before the cluster is fully conﬁgured and tested.

Select one of the following:

Explanation

Question 5 of 21

Select one of the following:

Explanation

Question 6 of 21

When a new FortiGate is added to the cluster, the primary FortiGate compares its conﬁguration checksum with the new secondary FortiGate conﬁguration checksum. If the checksums don't match, the primary FortiGate uploads its complete conﬁguration to the secondary FortiGate.

Select one of the following:

Explanation

Question 7 of 21

Types of HA sync

Select one of the following:

Explanation

Question 8 of 21

How many second check the cluster that all devices are synchronized:

Select one of the following:

Explanation

Question 9 of 21

If any secondary is out of sync, the checksum of secondary devices is then checked every

Select one of the following:

Explanation

Question 10 of 21

If checksums don't match for ﬁve consecutive checks:

Select one of the following:

Explanation

Question 11 of 21

Select one of the following:

Explanation

Question 12 of 21

Session synchronization: The synchronization of SSL VPN sessions is supported.

Select one of the following:

Explanation

Question 13 of 21

Session synchronization (Select 4)

Select one or more of the following:

Explanation

Question 14 of 21

What information is synchronized between two FortiGate devices that belong to the same HA cluster?

Select one of the following:

Explanation

Question 15 of 21

Which one of the following session types can be synchronized in an HA cluster?

Select one of the following:

Explanation

Question 16 of 21

Drag and drop to complete the text.

Explanation

Question 17 of 21

Virtual MAC Addresses and Failover

Select one of the following:

Explanation

Question 18 of 21

You can conﬁgure virtual clustering between with two or more FortiGate´s devices with multiple VDOMs.

Select one of the following:

Explanation

Question 19 of 21

A HA failover occurs when the link status of a monitored interface on the goes down.

Select one of the following:

Explanation

Question 20 of 21

The heartbeat interface IP address 169.254.0.1 is assigned to which FortiGate in an HA cluster?

Select one of the following:

Explanation

Question 21 of 21

FortiGates keep their heartbeat virtual IP addresses regardless of any change in their role (primary or secondary).:
- The IP address assignment changes only when a FortiGate leaves or joins cluster.

Session synchronization:
The synchronization of SSL VPN sessions is supported.