View all questions & answers for the NSE 4 - FortiOS 7.6 Administrator Exam Materials exam

NSE 4 - FortiOS 7.6 Administrator Exam Materials - Question #17 Discussion

Comment Image Comment Image Comment Image

Which two statements are true about an HA cluster? (Choose two answers)

  • A. An HA cluster cannot have both in-band and out-of-band management interfaces at the same time.
  • B. Link failover triggers a failover if the administrator sets the interface down on the primary device.
  • C. When sniffing the heartbeat interface, the administrator must see the IP address 169.254.0.2.
  • D. HA incremental synchronization includes FIB entries and IPsec SAs.
Correct Answer: B,D

Brave-Dump Community Votes

Answer: B, D (7 votes) 70%
Answer: C, D (2 votes) 20%
Answer: B, C (1 vote) 10%

Community Explanations & Comments (10)

imade 11 months ago
Selected: B, C
page 498 for C
imade 11 months ago
C , D B is incorrect actually since an administrative failover is not considered a failover event like unpluggging the cable.
Jo ROLD 10 months ago
Selected: C, D
C: Page 499 of Study Guide
D: Page 503
Ian 10 months ago
Selected: B, D
C - Incorrect

P498 Study Guide "FGCP automatically assigns the heartbeat IP addresses based on the serial number of each device. The IP address 169.254.0.1 is assigned to the device with the highest serial number."
Joffrey Noel 10 months ago
C it's correct because the first member take the ip .1 but the second take the ip .2 example of the commande get system ha status vcluster 1: work 169.254.0.2
shaik zubair 10 months ago
Selected: B, D
Option A: FALSE
"An HA cluster cannot have both in-band and out-of-band management interfaces at the same time."

Option C: FALSE
"When sniffing the heartbeat interface, the administrator must see the IP address 169.254.0.2." This is incorrect. HA heartbeat traffic uses link-local multicast or Ethernet frames, not a specific IP address like 169.254.0.2. Uses Ethertype 0x8890 (FortiGate proprietary) & Layer 2 communication (not IP-based)
shaik zubair 10 months ago
Selected: B, D
Option A: FALSE
"An HA cluster cannot have both in-band and out-of-band management interfaces at the same time."

Option C: FALSE
"When sniffing the heartbeat interface, the administrator must see the IP address 169.254.0.2." This is incorrect. HA heartbeat traffic uses link-local multicast or Ethernet frames, not a specific IP address like 169.254.0.2. Uses Ethertype 0x8890 (FortiGate proprietary) & Layer 2 communication (not IP-based)
Anonymous User 9 months ago
Selected: B, D
BD, you sniff interfaces not IP addresses
Anonymous User 7 months ago
Selected: B, D
D - P456
B - P463
Anonymous User 4 months ago
Selected: C, D
C. When sniffing the heartbeat interface, the administrator must see the IP address 169.254.0.2.
FGCP assigns heartbeat interface addresses from the 169.254.0.x range. The documentation specifically shows the primary unit heartbeat interface as 169.254.0.2 in HA status output.

D. HA incremental synchronization includes FIB entries and IPsec SAs.
The HA heartbeat link is used for synchronization traffic including routing tables (FIB entries) and IPsec states/keys (IPsec SAs). The documentation explicitly mentions synchronization of routing tables and IPsec states over the HA heartbeat infrastructure.
Anonymous User 4 months ago
Selected: B, D
B,D
Anonymous User 3 months ago
Selected: B, D
17