nerdexam
Fortinet

NSE4 · Question #82

In HA, the option Reserve Management Port for Cluster Member is selected as shown in the exhibit below. Which statements are correct regarding this setting? (Choose two.)

The correct answer is A. Interface settings on port7 will not be synchronized with other cluster members. D. A gateway address may be configured for port7. When a management port is reserved in a FortiGate HA cluster, its configuration is not synchronized between members, allowing for a unique gateway to be set for that specific port.

Submitted by the_admin· Apr 18, 2026FortiGate Deployment and System Configuration

Question

In HA, the option Reserve Management Port for Cluster Member is selected as shown in the exhibit below. Which statements are correct regarding this setting? (Choose two.)

Exhibit

NSE4 question #82 exhibit

Options

  • AInterface settings on port7 will not be synchronized with other cluster members.
  • BThe IP address assigned to this interface must not overlap with the IP address subnet assigned to
  • CWhen connecting to port7 you always connect to the master device.
  • DA gateway address may be configured for port7.

How the community answered

(26 responses)
  • A
    92% (24)
  • B
    4% (1)
  • C
    4% (1)

Why each option

When a management port is reserved in a FortiGate HA cluster, its configuration is not synchronized between members, allowing for a unique gateway to be set for that specific port.

AInterface settings on port7 will not be synchronized with other cluster members.Correct

When "Reserve Management Port for Cluster Member" is enabled, the interface's settings (like IP address, administrative access) are specific to each FortiGate unit in the HA cluster and are not synchronized, ensuring individual management access even if the cluster fails over.

BThe IP address assigned to this interface must not overlap with the IP address subnet assigned to

The IP address on a reserved management port must be unique among cluster members, but it can reside within any non-overlapping subnet; the statement implies a restriction related to *other* interfaces, which isn't the primary concern.

CWhen connecting to port7 you always connect to the master device.

Reserving a management port allows direct connection to *that specific unit*, regardless of its HA role (master or slave), for individual management, rather than always connecting to the master.

DA gateway address may be configured for port7.Correct

Since a reserved management port's configuration is not synchronized and is intended for out-of-band management, it can be assigned its own IP address and a corresponding gateway address if it needs to reach management subnets outside its local segment.

Concept tested: FortiGate HA reserved management port

Source: https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/523956/reserved-management-interface

Topics

#FortiGate HA#Management Interface#HA Configuration#Interface Synchronization

Community Discussion

No community discussion yet for this question.

Full NSE4 Practice