What are the requirements for a HA cluster to maintain TCP connections after device or link failover? (Choose two.)

Enabling session pick-up allows the FortiGate HA cluster to synchronize active session states between the master and slave units, enabling the new master to seamlessly take over existing TCP connections during a failover.

Enabling override influences the HA master election process but does not directly contribute to session persistence or pick-up.

The question specifically asks about TCP connections, which are stateful; UDP and ICMP connections are handled differently and are not the primary concern for session pick-up due to their connectionless nature or limited state.

Connections handled by proxy-based services (e.g., explicit proxy, certain deep inspection) are terminated and re-established by the FortiGate, which prevents the original TCP session from being picked up by the new master during a failover.