View all questions & answers for the NSE 4 - FortiOS 7.6 Administrator Exam Materials exam


NSE 4 - FortiOS 7.6 Administrator Exam Materials-Question 17 Discussion
Comment Image Comment Image Comment Image

Which two statements are true about an HA cluster? (Choose two answers)

  • A. An HA cluster cannot have both in-band and out-of-band management interfaces at the same time.
  • B. Link failover triggers a failover if the administrator sets the interface down on the primary device.
  • C. When sniffing the heartbeat interface, the administrator must see the IP address 169.254.0.2.
  • D. HA incremental synchronization includes FIB entries and IPsec SAs.
Correct Answer: B,D

Brave-Dump Clients Votes

BD 66.67%
CD 22.22%
BC 11.11%

Comments



imade 2025-11-20 00:37:47

Selected Answers: B, C


page 498 for C
  • imade 2025-11-20 18:15:00
    C , D B is incorrect actually since an administrative failover is not considered a failover event like unpluggging the cable.

Jo ROLD 2025-12-01 18:53:31

Selected Answers: C, D


C: Page 499 of Study Guide
D: Page 503

Ian 2025-12-03 17:29:30

Selected Answers: B, D


C - Incorrect

P498 Study Guide "FGCP automatically assigns the heartbeat IP addresses based on the serial number of each device. The IP address 169.254.0.1 is assigned to the device with the highest serial number."
  • Joffrey Noel 2025-12-09 17:59:49
    C it's correct because the first member take the ip .1 but the second take the ip .2 example of the commande get system ha status vcluster 1: work 169.254.0.2

shaik zubair 2025-12-09 19:16:27

Selected Answers: B, D


Option A: FALSE
"An HA cluster cannot have both in-band and out-of-band management interfaces at the same time."

Option C: FALSE
"When sniffing the heartbeat interface, the administrator must see the IP address 169.254.0.2." This is incorrect. HA heartbeat traffic uses link-local multicast or Ethernet frames, not a specific IP address like 169.254.0.2. Uses Ethertype 0x8890 (FortiGate proprietary) & Layer 2 communication (not IP-based)

shaik zubair 2025-12-09 19:16:28

Selected Answers: B, D


Option A: FALSE
"An HA cluster cannot have both in-band and out-of-band management interfaces at the same time."

Option C: FALSE
"When sniffing the heartbeat interface, the administrator must see the IP address 169.254.0.2." This is incorrect. HA heartbeat traffic uses link-local multicast or Ethernet frames, not a specific IP address like 169.254.0.2. Uses Ethertype 0x8890 (FortiGate proprietary) & Layer 2 communication (not IP-based)

Anonymous User 2026-01-12 16:35:29

Selected Answers: B, D


BD, you sniff interfaces not IP addresses

Anonymous User 2026-03-26 16:16:08

Selected Answers: B, D


D - P456
B - P463

Anonymous User 2026-05-31 11:02:43

Selected Answers: C, D


C. When sniffing the heartbeat interface, the administrator must see the IP address 169.254.0.2.
FGCP assigns heartbeat interface addresses from the 169.254.0.x range. The documentation specifically shows the primary unit heartbeat interface as 169.254.0.2 in HA status output.

D. HA incremental synchronization includes FIB entries and IPsec SAs.
The HA heartbeat link is used for synchronization traffic including routing tables (FIB entries) and IPsec states/keys (IPsec SAs). The documentation explicitly mentions synchronization of routing tables and IPsec states over the HA heartbeat infrastructure.

Anonymous User 2026-06-08 14:34:58

Selected Answers: B, D


B,D