nerdexam
Fortinet

NSE4 · Question #91

Two devices are in an HA cluster, the device hostnames are STUDENT and REMOTE. Exhibit A shows the command output of diagnose sys session stat for the STUDENT device. Exhibit B shows the command…

The correct answer is A. STUDENT is likely to be the master device. D. There is not enough information to determine the cluster mode. This question asks to interpret FortiGate diagnose sys session stat output from two HA cluster members to determine their roles and cluster state.

Submitted by jordan8· Apr 18, 2026FortiGate Deployment and System Configuration

Question

Two devices are in an HA cluster, the device hostnames are STUDENT and REMOTE. Exhibit A shows the command output of diagnose sys session stat for the STUDENT device. Exhibit B shows the command output of diagnose sys session stat for the REMOTE device. Exhibit A:

Exhibit B:

Given the information provided in the exhibits, which of the following statements are correct? (Choose two.)

Exhibits

NSE4 question #91 exhibit 1
NSE4 question #91 exhibit 2

Options

  • ASTUDENT is likely to be the master device.
  • BSession-pickup is likely to be enabled.
  • CThe cluster mode is active-passive.
  • DThere is not enough information to determine the cluster mode.

How the community answered

(39 responses)
  • A
    77% (30)
  • B
    15% (6)
  • C
    8% (3)

Why each option

This question asks to interpret FortiGate `diagnose sys session stat` output from two HA cluster members to determine their roles and cluster state.

ASTUDENT is likely to be the master device.Correct

The STUDENT device has 250 active sessions while the REMOTE device has 0 sessions, indicating that STUDENT is actively processing traffic and therefore is likely the master device in an active-passive setup.

BSession-pickup is likely to be enabled.

While the question implies an HA cluster, the `diagnose sys session stat` output alone does not provide information about whether session-pickup is enabled or disabled.

CThe cluster mode is active-passive.

Although STUDENT having sessions and REMOTE having none suggests active-passive, the `diagnose sys session stat` command output itself does not definitively state the cluster mode, as it only reports session counts.

DThere is not enough information to determine the cluster mode.Correct

The `diagnose sys session stat` output shows only current and maximum session counts for each device; it does not provide explicit information about the configured HA cluster mode (e.g., active-passive, active-active). Without additional commands or configuration details, the cluster mode cannot be definitively determined from this output alone.

Concept tested: FortiGate HA session statistics interpretation

Source: https://docs.fortinet.com/document/fortigate/7.4.0/fortios-cli-reference/162803/diagnose-sys-session-stat

Topics

#FortiGate HA#Session Synchronization#diagnose sys session stat#HA Monitoring

Community Discussion

No community discussion yet for this question.

Full NSE4 Practice