NSE4 · Question #406
What information is synchronized between two FortiGate units that belong to the same HA cluster? (Choose three)
The correct answer is A. IP addresses assigned to DHCP enabled interface. C. Routing configured and state. E. Firewall policies and objects. In a FortiGate HA cluster, critical configuration elements such as DHCP IP addresses, routing tables and state, and firewall policies and objects are synchronized between members to maintain stateful failover and consistent operation.
Question
What information is synchronized between two FortiGate units that belong to the same HA cluster? (Choose three)
Options
- AIP addresses assigned to DHCP enabled interface.
- BThe master devices hostname.
- CRouting configured and state.
- DReserved HA management interface IP configuration.
- EFirewall policies and objects.
How the community answered
(65 responses)- A91% (59)
- B6% (4)
- D3% (2)
Why each option
In a FortiGate HA cluster, critical configuration elements such as DHCP IP addresses, routing tables and state, and firewall policies and objects are synchronized between members to maintain stateful failover and consistent operation.
IP addresses assigned to DHCP-enabled interfaces and client lease information are synchronized to ensure that DHCP client leases are maintained across a failover event.
The master device's hostname is a device-specific identifier and typically not synchronized across HA members, as each member retains its unique hostname.
Routing configurations (static, dynamic) and the current routing state (e.g., active routes) are synchronized to ensure seamless traffic forwarding and network reachability after a failover.
Reserved HA management interface IP configuration is unique to each individual HA member, allowing for separate out-of-band management access, and is therefore not synchronized.
Firewall policies and objects (addresses, services, schedules, etc.) are fundamental configuration elements that must be fully synchronized to ensure consistent security enforcement and traffic handling across all HA members.
Concept tested: FortiGate HA synchronization
Source: https://docs.fortinet.com/document/fortigate/7.4.0/fortios-high-availability/818961/ha-synchronization
Topics
Community Discussion
No community discussion yet for this question.