NSE 4 – FortiGate 6.0 — Question 85

In a high availability (HA) cluster operating in active-active mode, which of the following correctly describes the path taken by the SYN packet of an HTTP session that is offloaded to a secondary FortiGate?

Answer options

• A. Client > primary FortiGate> secondary FortiGate> primary FortiGate> web server.
• B. Client > secondary FortiGate> web server.
• C. Clinet >secondary FortiGate> primary FortiGate> web server.
• D. Client> primary FortiGate> secondary FortiGate> web server.

Correct answer: D

Explanation

The correct answer is D, as the SYN packet from the client first goes to the primary FortiGate, which then forwards it to the secondary FortiGate before reaching the web server. Options A and C introduce unnecessary loops or incorrect paths, while option B skips the primary FortiGate, which is not consistent with the active-active HA operation.