NSE 4 – FortiGate 5.4 — Question 45

What are the requirements for a HA cluster to maintain TCP connections after device or link failover? (Choose two.)

Answer options

• A. Enable session pick-up.
• B. Enable override.
• C. Connections must be UDP or ICMP.
• D. Connections must not be handled by a proxy.

Correct answer: A, D

Explanation

The correct answers are A and D. Enabling session pick-up allows the cluster to maintain existing TCP connections during a failover, while connections not being handled by a proxy ensures that the direct connection state is preserved. Options B and C are incorrect because enabling override does not relate to maintaining TCP connections, and connections requiring UDP or ICMP would not be applicable in the context of TCP connections.