NSE4_FGT-7.0 · Question #33
Which statements about the firmware upgrade process on an active-active HA cluster are true? (Choose two.)
The correct answer is C. Uninterruptable upgrade is enabled by default. D. Traffic load balancing is temporally disabled while upgrading the firmware. During an active-active HA cluster firmware upgrade, uninterruptable upgrade is enabled by default, and traffic load balancing is temporarily disabled to ensure service continuity.
Question
Which statements about the firmware upgrade process on an active-active HA cluster are true? (Choose two.)
Options
- AThe firmware image must be manually uploaded to each FortiGate.
- BOnly secondary FortiGate devices are rebooted.
- CUninterruptable upgrade is enabled by default.
- DTraffic load balancing is temporally disabled while upgrading the firmware.
How the community answered
(55 responses)- A4% (2)
- B7% (4)
- C89% (49)
Why each option
During an active-active HA cluster firmware upgrade, uninterruptable upgrade is enabled by default, and traffic load balancing is temporarily disabled to ensure service continuity.
In a FortiGate HA cluster, the firmware image only needs to be uploaded to the primary (master) FortiGate device, which then automatically synchronizes and pushes the firmware to all secondary (slave) devices in the cluster.
During a firmware upgrade in an HA cluster, all FortiGate devices in the cluster, including both primary and secondary units, are rebooted one by one as part of the upgrade process, managed by the U-upgrade feature to prevent service interruption.
Uninterruptable Upgrade (U-upgrade) is a feature designed for HA clusters to minimize downtime during firmware upgrades, allowing the cluster to continue processing traffic. In active-active HA, this capability is typically enabled by default to ensure high availability during maintenance by upgrading units sequentially.
During a firmware upgrade on an active-active HA cluster, the cluster temporarily operates in active-passive mode, meaning that traffic load balancing is temporally disabled. This ensures a smooth upgrade process by preventing traffic from being directed to a device that is currently offline or rebooting, maintaining service continuity on the active unit.
Concept tested: FortiGate active-active HA firmware upgrade
Source: https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/867941/upgrading-firmware-in-an-ha-cluster
Topics
Community Discussion
No community discussion yet for this question.