NSE 4 – FortiGate 6.2 — Question 27

In an HA cluster operating in active-active mode, which path is taken by the SYN packet of an HTTP session that is offloaded to a secondary FortiGate?

Answer options

• A. Client > secondary FortiGate > primary FortiGate > web server
• B. Client > primary FortiGate > secondary FortiGate > primary FortiGate > web server
• C. Client > primary FortiGate > secondary FortiGate > web server
• D. Client > secondary FortiGate > web server

Correct answer: C

Explanation

The correct answer is C because in an active-active configuration, the secondary FortiGate can directly communicate with the web server after receiving the SYN packet from the client via the primary FortiGate. Options A and D incorrectly suggest additional or unnecessary hops, while option B introduces an extra step that is not needed for the SYN packet routing.