nerdexam
Fortinet

NSE4 · Question #406

What information is synchronized between two FortiGate units that belong to the same HA cluster? (Choose three)

The correct answer is A. IP addresses assigned to DHCP enabled interface. C. Routing configured and state. E. Firewall policies and objects. In a FortiGate HA cluster, critical configuration elements such as DHCP IP addresses, routing tables and state, and firewall policies and objects are synchronized between members to maintain stateful failover and consistent operation.

Submitted by satoshi_tk· Apr 18, 2026FortiGate Deployment and System Configuration

Question

What information is synchronized between two FortiGate units that belong to the same HA cluster? (Choose three)

Options

  • AIP addresses assigned to DHCP enabled interface.
  • BThe master devices hostname.
  • CRouting configured and state.
  • DReserved HA management interface IP configuration.
  • EFirewall policies and objects.

How the community answered

(65 responses)
  • A
    91% (59)
  • B
    6% (4)
  • D
    3% (2)

Why each option

In a FortiGate HA cluster, critical configuration elements such as DHCP IP addresses, routing tables and state, and firewall policies and objects are synchronized between members to maintain stateful failover and consistent operation.

AIP addresses assigned to DHCP enabled interface.Correct

IP addresses assigned to DHCP-enabled interfaces and client lease information are synchronized to ensure that DHCP client leases are maintained across a failover event.

BThe master devices hostname.

The master device's hostname is a device-specific identifier and typically not synchronized across HA members, as each member retains its unique hostname.

CRouting configured and state.Correct

Routing configurations (static, dynamic) and the current routing state (e.g., active routes) are synchronized to ensure seamless traffic forwarding and network reachability after a failover.

DReserved HA management interface IP configuration.

Reserved HA management interface IP configuration is unique to each individual HA member, allowing for separate out-of-band management access, and is therefore not synchronized.

EFirewall policies and objects.Correct

Firewall policies and objects (addresses, services, schedules, etc.) are fundamental configuration elements that must be fully synchronized to ensure consistent security enforcement and traffic handling across all HA members.

Concept tested: FortiGate HA synchronization

Source: https://docs.fortinet.com/document/fortigate/7.4.0/fortios-high-availability/818961/ha-synchronization

Topics

#HA Synchronization#FortiGate Clustering#Configuration Management#Stateful Failover

Community Discussion

No community discussion yet for this question.

Full NSE4 Practice