View all questions & answers for the NSE 4 - FortiOS 7.6 Administrator Exam Materials exam


Question 54 Discussion

What are two characteristics of HA cluster heartbeat IP addresses in a FortiGate device? (Choose two answers)

  • A. Heartbeat interfaces have virtual IP addresses that are manually assigned.
  • B. Heartbeat IP addresses are used to distinguish between cluster members.
  • C. The heartbeat interface of the primary device in the cluster is always assigned IP address 169.254.0.1.
  • D. A change in the heartbeat IP address happens when a FortiGate device joins or leaves the cluster.
Correct Answer: B,D

Brave-Dump Clients Votes

BD 75%
BC 25%

Comments



Ahmed Ezzat 2025-07-19 00:27:51

Selected Answers: B, C


I think C is BETTER than D, as (D) says the change must but the study book says it may happen and but not always p499
  • Ahmed Ezzat 2025-07-19 23:01:26
    No C is wrong, the IP may still with the interface even the role change from primary to secondary
  • Brave-Dumps Admin 2025-07-20 12:01:25
    Thank you, Ahmed, for sharing your experience with the Brave-Dumps community — you're doing an excellent job! According to the FortiGate 7.6 Study Guide (page 498), the correct answers should be B and D.

Lokesh Kumar Verma 2025-07-31 15:43:18

Selected Answers: B, D


B. Heartbeat IP addresses are used to distinguish between cluster members.
Correct. In a FortiGate HA (High Availability) cluster, each member uses link-local IP addresses (169.254.x.x) on the HA heartbeat interfaces. These IP addresses help identify and communicate with each cluster peer.

D. A change in the heartbeat IP address happens when a FortiGate device joins or leaves the cluster.
Correct. The link-local IP addresses are dynamically assigned during cluster formation.
If a device joins or leaves, the cluster may reassign or adjust these addresses to keep the cluster consistent and functioning.

A. Heartbeat interfaces have virtual IP addresses that are manually assigned.
Incorrect. The heartbeat interfaces use dynamically assigned link-local IPs (169.254.x.x) , they are not manually configured virtual IPs. These are not the same as HA virtual MAC or cluster IPs used for traffic failover.

C. The heartbeat interface of the primary device in the cluster is always assigned IP address 169.254.0.1.
Incorrect. There is no guarantee that the primary device (FGCP master) will always have 169.254.0.1 , the IPs are dynamically negotiated and not static or fixed based on roles.

Vic Geek 2025-12-18 06:17:00

Selected Answers: B, D


"The FGCP uses link-local IPv4 addresses (see RFC 3927) in the 169.254.0.x range for the virtual HA heartbeat interface (port_ha) and for the inter-VDOM link interfaces between the vsys_ha and management VDOM. When members join an HA cluster, each member's heartbeat interface (port_ha) is assigned an IP address from the range of 169.254.0.1 to 169.254.0.63/26. HA inter-VDOM link interfaces (havdlink0 and havdlink1) are assigned IP address from the range of 169.254.0.65 to 169.254.0.66/26.

The IP address that is assigned to a virtual heartbeat interface depends on the serial number priority of the member. Higher serial numbers have a higher priority, and therefore a lower serialno_prio number"

https://docs.fortinet.com/document/fortigate/7.6.4/administration-guide/849059/ha-heartbeat-interface

Mehdi 2026-01-12 12:19:59

Selected Answers: B, D


Why A and C are incorrect
A. Heartbeat interfaces have virtual IP addresses that are manually assigned.
Heartbeat IPs are not manually configured; FGCP automatically allocates link‑local addresses for the virtual heartbeat interfaces.
​

C. The heartbeat interface of the primary device in the cluster is always assigned IP address 169.254.0.1.
Older descriptions show the primary starting as 169.254.0.1, but in current behaviour the address depends on serial‑number‑based priority and can change as units join or leave, so it is not guaranteed to “always” be 169.254.0.1.