nerdexam
Fortinet

NSE4 · Question #346

Which statements about high availability (HA) for FortiGates are true? (Choose two.)

The correct answer is A. Virtual clustering can be configured between two FortiGate devices with multiple VDOM. C. HA management interface settings are synchronized between cluster members. FortiGate HA supports virtual clustering with multiple VDOMs, and management interface settings are synchronized between cluster members.

Submitted by tarun92· Apr 18, 2026FortiGate Deployment and System Configuration

Question

Which statements about high availability (HA) for FortiGates are true? (Choose two.)

Options

  • AVirtual clustering can be configured between two FortiGate devices with multiple VDOM.
  • BHeartbeat interfaces are not required on the primary device.
  • CHA management interface settings are synchronized between cluster members.
  • DSessions handled by UTM proxy cannot be synchronized.

How the community answered

(32 responses)
  • A
    91% (29)
  • B
    6% (2)
  • D
    3% (1)

Why each option

FortiGate HA supports virtual clustering with multiple VDOMs, and management interface settings are synchronized between cluster members.

AVirtual clustering can be configured between two FortiGate devices with multiple VDOM.Correct

FortiGate Cluster Protocol (FGCP) High Availability can be configured on FortiGate devices that have multiple Virtual Domains (VDOMs), where the HA configuration applies across all VDOMs on the cluster members.

BHeartbeat interfaces are not required on the primary device.

Heartbeat interfaces are mandatory on all FortiGate devices participating in an HA cluster, including both primary and secondary devices, to maintain communication and detect failover conditions.

CHA management interface settings are synchronized between cluster members.Correct

For an HA cluster to function consistently and allow seamless management, settings related to the HA management interface, such as IP addresses and allowed access, are synchronized among all cluster members.

DSessions handled by UTM proxy cannot be synchronized.

Sessions handled by UTM proxy are synchronized in a FortiGate HA cluster, allowing for stateful failover and ensuring that ongoing proxy-based traffic sessions are maintained across a failover event.

Concept tested: FortiGate HA cluster VDOMs and synchronization

Source: https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/526785/ha-and-vdoms

Topics

#FortiGate HA#HA configuration#VDOM support#Session synchronization

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full NSE4 Practice