NSE 4 – FortiGate Administrator 7.6 — Question 31

Which two statements are true about an HA cluster? (Choose two.)

Answer options

• A. Link failover triggers a failover if the administrator sets the interface down on the primary device.
• B. An HA cluster cannot have both in-band and out-of-band management interfaces at the same time.
• C. When sniffing the heartbeat interface, the administrator must see the IP address 169.254.0.2.
• D. HA incremental synchronization includes FIB entries and IPsec SAs.

Correct answer: A, D

Explanation

Option A is correct because link failover does indeed activate a failover when the primary device's interface is set down. Option D is also correct as HA incremental synchronization includes both FIB entries and IPsec SAs. Options B and C are incorrect; an HA cluster can have both types of management interfaces, and the specified IP address is not a requirement for monitoring the heartbeat interface.