FCP – FortiWAN and Cloud Security Administrator 7.4 — Question 10

Your organization is deciding between deploying an active-active (A-A) or active-passive (A-P) FortiGate high availability (HA) cluster in AWS cloud.
Which two statements are true about A-A clusters compared to A-P clusters? (Choose two.)

Answer options

• A. For A-A clusters, FortiGate must perform SNAT inbound to ensure symmetric traffic flow.
• B. A-A clusters rely on API calls for failovers.
• C. A-A clusters always require a load balancer.
• D. A-A clusters can use a software-defined network (SDN) to perform a failover.

Correct answer: A, C

Explanation

Option A is correct because A-A clusters require SNAT to maintain symmetric traffic flow. Option C is also correct as A-A clusters typically need a load balancer to distribute traffic effectively. Options B and D are incorrect as they do not accurately reflect the requirements or operations of A-A clusters compared to A-P clusters.