NSE 4 – FortiGate 5.4 — Question 21

Which statements about the firmware upgrade process on an active-active high availability (HA) cluster are true? (Choose two.)

Answer options

• A. The firmware image must be manually uploaded to each FortiGate.
• B. Only secondary FortiGate devices are rebooted.
• C. Uninterruptable upgrade is enabled by default.
• D. Traffic load balancing is temporally disabled while upgrading the firmware.

Correct answer: B, D

Explanation

Option B is correct because in an active-active HA setup, only the secondary units are rebooted during the firmware upgrade while the primary continues to handle traffic. Option D is also correct as traffic load balancing is suspended to ensure stability during the upgrade process. Options A and C are incorrect because the firmware image can be uploaded to the cluster rather than each unit individually, and uninterruptible upgrade is not necessarily enabled by default.