Which two statements are true regarding FortiGate HA configuration synchronization? (Choose two.)
Which two statements are true regarding FortiGate HA configuration synchronization? (Choose two.)
AC: FortiGate 7.4 Administrator Study Guide pg.421 "After the initial synchronization is complete, whenever a change is made to the configuration of an HA cluster device (primary or secondary), incremental synchronization sends the same configuration change to all other cluster devices over the HA heartbeat link"
A y C son correctos
A&C is the correct answer.
A & C are correct
A and C
checksums must be the same if any change occurs, incremental sync must happen to ensure checksums keep the same
A and C are correct.
A and C are correct.
Checksum must be equal on both fortigate. Incremental Configuration Synchronization happens when the primary configuration is changed and changes are synchronized to the secondary. Secondary configuration is changed and changes are synchronized to the primary.
why D is not correct, but A is correct? as in HA mode, each unit could have difference "dedicated management interface" setting (e.g. management interface IP) ... how come the checksum must match?
We know that some configurations are not synchronizable, but this does not mean that synchronization will not occur, it will occur at the level of the configurations that are synchronizable. (page 423 Fortigate 7.4 administrator guide)
real life tried out in lab ... seems HA config didn't count in config checksum... sorry guys
Incremental config sync only happens by changes on primary HA member other device's can't have any config changes when they are secondary. So the correct answer is A & B.
O FortiGate usa checksums para verificar a consistência das configurações entre os membros do cluster. Se os checksums forem diferentes, isso indica que as configurações estão fora de sincronia. Apenas o dispositivo primário pode fazer alterações na configuração. Essas alterações são então sincronizadas de forma incremental com os dispositivos secundários no cluster.
The correct answer is A and B.
I believe that this is a tricky question. The correct answer could be A, B, and C since incremental configuration sync can happen if any of the member configurations are changed.
I made a mistake. The correct answer is AC, 100%.
After the initial synchronization is complete, whenever a change is made to the configuration of an HA cluster device (primary or secondary), incremental synchronization sends the same configuration change to all other cluster devices over the HA heartbeat link. An HA synchronization process running on each cluster device receives the configuration change and applies it to the cluster device. For example, if you create a firewall address object, the primary doesn’t resend its complete configuration—it sends only the new object.
A and C 100%
Here's what the actual Study Guide (page 421) says: "Only the primary unit should be used to make configuration changes. Configuration changes made to secondary units are not synchronized to the primary unit and are lost." This directly contradicts the statement in question.