NSE 4 – FortiGate 6.0 — Question 25

Which statements about the firmware upgrade process on an active-active HA cluster are true? (Choose two.)

Answer options

• A. The firmware image must be manually uploaded to each FortiGate.
• B. Only secondary FortiGate devices are rebooted.
• C. Uninterruptable upgrade is enabled by default.
• D. Traffic load balancing is temporally disabled while upgrading the firmware.

Correct answer: B, D

Explanation

Option B is correct because, during a firmware upgrade in an active-active HA cluster, only the secondary FortiGate devices need to reboot, allowing the primary to handle traffic. Option D is also correct as traffic load balancing is temporarily disabled to ensure a smooth upgrade process without affecting performance. Options A and C are incorrect since the firmware image can be managed centrally and uninterruptable upgrade may not always be enabled by default.