nerdexam
Fortinet

NSE4_FGT-7.0 · Question #33

Which statements about the firmware upgrade process on an active-active HA cluster are true? (Choose two.)

The correct answer is C. Uninterruptable upgrade is enabled by default. D. Traffic load balancing is temporally disabled while upgrading the firmware. During an active-active HA cluster firmware upgrade, uninterruptable upgrade is enabled by default, and traffic load balancing is temporarily disabled to ensure service continuity.

High Availability

Question

Which statements about the firmware upgrade process on an active-active HA cluster are true? (Choose two.)

Options

  • AThe firmware image must be manually uploaded to each FortiGate.
  • BOnly secondary FortiGate devices are rebooted.
  • CUninterruptable upgrade is enabled by default.
  • DTraffic load balancing is temporally disabled while upgrading the firmware.

How the community answered

(55 responses)
  • A
    4% (2)
  • B
    7% (4)
  • C
    89% (49)

Why each option

During an active-active HA cluster firmware upgrade, uninterruptable upgrade is enabled by default, and traffic load balancing is temporarily disabled to ensure service continuity.

AThe firmware image must be manually uploaded to each FortiGate.

In a FortiGate HA cluster, the firmware image only needs to be uploaded to the primary (master) FortiGate device, which then automatically synchronizes and pushes the firmware to all secondary (slave) devices in the cluster.

BOnly secondary FortiGate devices are rebooted.

During a firmware upgrade in an HA cluster, all FortiGate devices in the cluster, including both primary and secondary units, are rebooted one by one as part of the upgrade process, managed by the U-upgrade feature to prevent service interruption.

CUninterruptable upgrade is enabled by default.Correct

Uninterruptable Upgrade (U-upgrade) is a feature designed for HA clusters to minimize downtime during firmware upgrades, allowing the cluster to continue processing traffic. In active-active HA, this capability is typically enabled by default to ensure high availability during maintenance by upgrading units sequentially.

DTraffic load balancing is temporally disabled while upgrading the firmware.Correct

During a firmware upgrade on an active-active HA cluster, the cluster temporarily operates in active-passive mode, meaning that traffic load balancing is temporally disabled. This ensures a smooth upgrade process by preventing traffic from being directed to a device that is currently offline or rebooting, maintaining service continuity on the active unit.

Concept tested: FortiGate active-active HA firmware upgrade

Source: https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/867941/upgrading-firmware-in-an-ha-cluster

Topics

#HA cluster#Firmware upgrade#Uninterruptible upgrade

Community Discussion

No community discussion yet for this question.

Full NSE4_FGT-7.0 Practice