nerdexam
Fortinet

NSE4_FGT-7.0 · Question #154

Refer to the exhibit. The exhibit displays the output of the CLI command: diagnose sys ha dump-by vcluster. Which two statements are true? (Choose two.)

The correct answer is A. FortiGate SN FGVM010000065036 HA uptime has been reset. C. FortiGate SN FGVM010000064692 is the primary because of higher HA uptime. The FortiGate HA dump output indicates that one device, SN FGVM010000065036, had its HA uptime reset, while FortiGate SN FGVM010000064692 is the primary due to its higher HA uptime.

High Availability

Question

Refer to the exhibit. The exhibit displays the output of the CLI command: diagnose sys ha dump-by vcluster. Which two statements are true? (Choose two.)

Exhibit

NSE4_FGT-7.0 question #154 exhibit

Options

  • AFortiGate SN FGVM010000065036 HA uptime has been reset.
  • BFortiGate devices are not in sync because one device is down.
  • CFortiGate SN FGVM010000064692 is the primary because of higher HA uptime.
  • DFortiGate SN FGVM010000064692 has the higher HA priority.

How the community answered

(24 responses)
  • A
    58% (14)
  • B
    13% (3)
  • D
    29% (7)

Why each option

The FortiGate HA dump output indicates that one device, SN FGVM010000065036, had its HA uptime reset, while FortiGate SN FGVM010000064692 is the primary due to its higher HA uptime.

AFortiGate SN FGVM010000065036 HA uptime has been reset.Correct

The HA uptime of FortiGate SN FGVM010000065036 showing a significantly lower value or a recent start time indicates that its HA process or the device itself has recently restarted or experienced a failover event, resetting its uptime counter.

BFortiGate devices are not in sync because one device is down.

The command output `diagnose sys ha dump-by vcluster` typically shows the status of both devices in the HA cluster, indicating they are both operational and in sync; a device being 'down' would prevent HA synchronization.

CFortiGate SN FGVM010000064692 is the primary because of higher HA uptime.Correct

FortiGate SN FGVM010000064692 is designated as the primary device because the HA primary selection process prioritizes the device with the longest HA uptime when other tie-breakers like HA priority or serial number are not explicitly configured to override it or are equal.

DFortiGate SN FGVM010000064692 has the higher HA priority.

While HA priority is a factor in primary selection, the question specifically states that FGVM010000064692 is primary due to higher HA uptime, implying that uptime was the decisive factor or its priority was not explicitly higher to override the uptime.

Concept tested: FortiGate HA primary selection and state analysis

Source: https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/469905/ha-uptime

Topics

#HA status#CLI diagnostics#HA uptime#master election

Community Discussion

No community discussion yet for this question.

Full NSE4_FGT-7.0 Practice