Refer to the exhibit. The exhibit displays the output of the CLI command: diagnose sys ha dump-by vcluster. Which two statements are true? (Choose two.)
A.
FortiGate SN FGVM010000065036 HA uptime has been reset.
B.
FortiGate devices are not in sync because one device is down.
C.
FortiGate SN FGVM010000064692 is the primary because of higher HA uptime.
D.
FortiGate SN FGVM010000064692 has the higher HA priority.
A & D - I test in my lab. between HA configuration
Explanation:
1. Override is disable by default - OK
2. "If the HA uptime of a device is AT LEAST FIVE MINUTES (300 seconds) MORE than the HA Uptime of the other FortiGate devices, it becomes the primary" The question here is : HA Uptime of FGVM01000006492 > 5 minutes? NO - 198 seconds < 300 seconds (5 minutes) Page 314 Infra Study Guide.
A & D
A is obvious, the uptime counter is 0.
The reason of D is the age is less than 300 seconds so uptime doesn't affect to the decision, so the priority have to be higher (assuming override enabled).
Two important details regarding uptime:
1. Time difference is measured in 1/10 sec, so 198 is not 198 seconds but rather 19,8 seconds
2. We can't tell the uptime, but rather the difference in uptime.
So one unit has been up 19,8 seconds longer than the other one. The 0 value of the other one signifies that it has been up for a shorter amount of time than the first one.
Fortigate Infrastructure 6.4 page 314
A&D
A - uptime/reset_cnt=0/1 (FortiGate_Infrastructure_7.0 page 319)
D - Since HA Uptime is out of the choices as explained below, then next conclusion is that FortiGate SN FGVM010000064692 has the higher HA priority. (FortiGate_Infrastructure_7.0 page 319 - refer to the diagram)
C - Cannot be true since the age difference (198) is less than 5 minutes (less than 300 seconds) so age has no affect on primary unit selection. (https://docs.fortinet.com/document/fortigate/6.0.0/handbook/666653/primary-unit-selection-with-override-disabled-default)
I thinks G33 could be right(his/her comment is below in this chain of comments).
Also, if you see Infrastructure_6.4 p345, you´ll see an example, where it can be appreciated that the master gateway with ha_prio/o=0/0 has higher user priority which is 200, the slave gateway has ha_prio/o=1/1 and user priority 100.
In this question, it doesn´t appear the user priority so the only clue is the ha_prio/o.
And following the logic, that the unit with ha_prio=0/0 is the master, then the D option would be false.
But, as I couldn´t find info that explicitly express this relationship, between ha_prio/o and user priority, this should be taken only as a simply deduction, of course it could be wrong. So if anyone has more info that could clarify/affirm/deny this hypothesis, it would be appreciated.
I thinks G33 could be right(his/her comment is below in this chain of comments).
Also, if you see Infrastructure_6.4 p345, you´ll see an example, where it can be appreciated that the master gateway with ha_prio/o=0/0 has higher user priority which is 200, the slave gateway has ha_prio/o=1/1 and user priority 100.
In this question, it doesn´t appear the user priority so the only clue is the ha_prio/o.
And following the logic, that the unit with ha_prio=0/0 is the master, then the D option would be false.
But, as I couldn´t find info that explicitaly express this relation, between ha_prio/o and user priority, this should be taken only as a simply deduction, it could be worng of course. So if anyone has more info that could clarify/affirm/deny this hypothesis, it would be appreciated.
this seems to be easy but is not... better to read for those beginners like me.... the answer is A&D according to this article... to be C which is not the uptime must pass 300 seconds.
https://docs.fortinet.com/document/fortigate/6.0.0/handbook/666653/primary-unit-selection-with-override-disabled-default
A & C -
A is obvious. Counter is '0'
With C, straight out of the Infra Guide "When HA override is disabled (this is by default btw), the HA uptime takes precedence over the priority setting" - The HA uptime is higher so we can assume that C is correct. Page 314 Infra Guide
A & C
A) uptime/reset_cnt=0/1 is the reset
not D) ha_prio/o=0/0 (0) is the higher priority so FGVM010000065036 has the higher priority hence D is incorrect
Wordings are tricky so work with what is certain
Correct is A & C : Override disable: (monitored Ports/ha Uptime/device Priority/device Serial number).
Override Enable: (monitored Ports/device Priority/ha Uptime/device Serial number).
Override disable is default.
FortiGate_Infrastructure_6.4 page 314 and 315
A & C for me, remember the HA Override is disabled by default and with Override Disabled the process to choose the primary device is PUPS (monitored Ports/ha Uptime/device Priority/device Serial number)
The question is not looking at which device is the primary. The question is, which statement is true? How do you know whether the override is disabled or enabled based on the exhibit? So for me, the answer is A and D.
someone can help me for this,please :
Which two statements are true about the FGCP protocol? (Choose two.)
A. Not used when FortiGate is in Transparent mode
B. Elects the primary FortiGate device
C. Runs only over the heartbeat links
D. Is used to discover FortiGate devices in different HA groups
BC
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
LensRevs
Highly Voted 3 years, 9 months agoBarCat
Highly Voted 3 years, 11 months agojccxx
Most Recent 3 years, 1 month agoCorynth
3 years, 2 months agoblahblah1234567890000
3 years, 2 months agoforti_Ctes
3 years, 7 months agolrosadini
3 years, 2 months ago2021gene
3 years, 7 months agolrosadini
3 years, 2 months ago2021gene
3 years, 7 months agofranger
3 years, 7 months agopcil
3 years, 8 months agoG33
3 years, 9 months agoamalmose
3 years, 8 months agoonaicul
3 years, 9 months agojarz
3 years, 10 months agocannoe
3 years, 9 months agoBarakissa
3 years, 11 months agoMEDO162
3 years, 11 months agoBarakissa
3 years, 11 months agosalon442
3 years, 11 months agodavidone
4 years agoLionardo
4 years ago