Test

HA II

Usuario eliminado 21 preguntas Actualizado el 11 abr 2019

Hacer el test

Este test tiene tipos de pregunta que se abren en el reproductor de siempre.

Preguntas del test (21)

1The cluster assigns virtual IP addresses to heartbeat interfaces based on each FortiGate’s serial number, what subnet use?
1. A169.254.0.0
2. B254.169.0.0
3. C169.0.254.0
4. D254.0.169.0
2FortiGates keep their heartbeat virtual IP addresses regardless of any change in their role (primary or secondary).:
- The IP address assignment changes only when a FortiGate leaves or joins cluster.
1. AVerdadero
2. BFalso
3Heartbeat communication can be enabled for physical interfaces, but not for: (Select 5)
1. AVLAN subinterfaces
2. BlPsec VPN interfaces
3. Credundant interfaces
4. D802.3ad aggregate interfaces
5. EFortiGate switch ports
6. FSoftware switch interfaces
7. GInterVDOM link interfaces
4As a best practice, in the moment a cluster is up and running and all interfaces are connected is recommended enabling interface monitoring. A monitored interface can easily become disconnected during initial setup and cause failovers to occur before the cluster is fully conﬁgured and tested.
1. AVerdadero
2. BFalso
5Incremental synchronization:

After the initial synchronization is complete, the primary will send any further conﬁguration changes done by an administrator to all the secondaries. For example, if you create a ﬁrewall address object, the primary doesn't resend its complete conﬁguration, it sends just the new object.
1. AVerdadero
2. BFalso
6When a new FortiGate is added to the cluster, the primary FortiGate compares its conﬁguration checksum with the new secondary FortiGate conﬁguration checksum. If the checksums don't match, the primary FortiGate uploads its complete conﬁguration to the secondary FortiGate.
1. AVerdadero
2. BFalso
7Types of HA sync
1. AComplete synchronization
  Incremental synchronization
2. BTotal synchronization
  Incremental synchronization
8How many second check the cluster that all devices are synchronized:
1. A60
2. B10
3. C15
9If any secondary is out of sync, the checksum of secondary devices is then checked every
1. A15 seconds.
2. B60 seconds.
3. C5 seconds.
10If checksums don't match for ﬁve consecutive checks:
1. Aa complete re-synchronization is done.
2. Ba incremental re-synchronization is done.

11Not all the conﬁguration settings are synchronized. There are a few that are not, such as:

- The system interface settings of the HA reserved management interface and the HA default route for the reserved management interface
- In-band HA management interface
- HA override
- HA device priority
- The virtual cluster priority
- The FortiGate host name
- The HA priority setting for a ping server (or dead gateway detection) conﬁguration
- Licenses
- Caches
1. AVerdadero
2. BFalso
12Session synchronization:
The synchronization of SSL VPN sessions is supported.
1. AVerdadero
2. BFalso
13Session synchronization (Select 4)
1. ATCP Session
2. BIPsec VPN session
3. CUDP and ICMP session
4. DMulticast session
5. ESSL VPN session
6. FHA session
7. GFGCP session
14What information is synchronized between two FortiGate devices that belong to the same HA cluster?
1. Aa. Firewall policies and objects
2. Bb. FortiGate hostname
15Which one of the following session types can be synchronized in an HA cluster?
1. Aa. SSL VPN sessions
2. Bb. IPsec VPN sessions
16[blank_start]A device failover[blank_end] is basically triggered when the primary FortiGate stops sending heartbeat trafﬁc. When this happens, the secondaries renegotiate a new primary.

[blank_start]A link failover[blank_end] occurs when the link status of a monitored interface on the primary FortiGate goes down. You can conﬁgure an HA cluster to monitor the link status of some interfaces. If a monitored interface on the primary FortiGate is unplugged, or its link status goes down, a new primary FortiGate is elected.
1. AA device failover
2. BA link failover
17Virtual MAC Addresses and Failover
1. AOn the primary, each interface is assigned a virtual MAC address.
  
  HA heartbeat interfaces are not assigned a virtual MAC address.
  
  Upon failover, the newly elected primary adopts the same virtual MAC addresses as the former primary.
2. BOn the primary, only one interface is assigned a virtual MAC address.
  
  HA heartbeat interfaces have a assigned virtual MAC address.
  
  Upon failover, the newly elected primary adopts a new virtual MAC addresses as the former primary.
18You can conﬁgure virtual clustering between with two or more FortiGate´s devices with multiple VDOMs.
1. AVerdadero
2. BFalso
19A HA failover occurs when the link status of a monitored interface on the goes down.
1. Aa. primary FortiGate
2. Bb. secondary FortiGate
20The heartbeat interface IP address 169.254.0.1 is assigned to which FortiGate in an HA cluster?
1. Aa. The FortiGate with the highest serial number
2. Bb. The FortiGate with the highest priority
21Which of the following statements about the firmware upgrade process on an HA cluster is true?
1. Aa. You only need to upload the new ﬁrmware to the primary FortiGate to upgrade an HA cluster.
2. Bb. The cluster members are not rebooted.

Información

Descripción: El usuario ha eliminado su información de asignaturas Test sobre HA II, creado por Usuario eliminado el 20/09/2018.
Autor: Usuario eliminado
Idioma: English
Visitas: 35
Historial: Creado el 20 sep 2018 · actualizado el 11 abr 2019
Etiquetas: el usuario ha eliminado su información de asignaturas

HA II

Preguntas del test (21)

Información

Escríbenos

¿Qué te parece el nuevo diseño?