Exam NSE7_EFW-7.2 topic 1 question 9 discussion

Actual exam question from Fortinet's NSE7_EFW-7.2

Question #: 9
Topic #: 1

An administrator has configured two FortiGate devices for an HA cluster. While testing HA failover, the administrator notices that some of the switches in the network continue to send traffic to the former primary device.
What can the administrator do to fix this problem?

A. Configure set link-failed-signal enable under config system ha on both cluster members
B. Configure set send-garp-on-failover enable under config system ha on both cluster members.
C. Configure remote link monitoring to detect an issue in the forwarding path.
D. Verify that the speed and duplex settings match between the FortiGate interfaces and the connected switch ports.

Show Suggested Answer

Suggested Answer: A 🗳️

by rananaj at Feb. 22, 2024, 4:42 p.m.

Comments

Submit Cancel

truserud

Highly Voted 1 year, 5 months ago

Selected Answer: A

Page 98 in the Study Guide: After a failover, the new primary broadcasts GARP patckets, notifying the network that each vMAC address is now reachable on a different port, however on some switch-models that might not be enough. To solve the issue that MAC-tables on switches are not updated after a failover, you should configure the following on a HA-cluster: config system ha set link-failed-signal enable end This will force the primary device to shut down all devices except mgmt and HA for one second, forcing the connected l2 devices to update their MAC-tables, as this simulates a link failure.

upvoted 5 times

...

ray_NSE8

Most Recent 10 months, 2 weeks ago

Selected Answer: A

The english study guide 7.2 , page 98 explains this.

upvoted 1 times

...

CHUA123

11 months, 3 weeks ago

Selected Answer: A

The only correct answer is A

upvoted 2 times

...

jddc10006

1 year, 1 month ago

A its correct

upvoted 2 times

...

1 year, 5 months ago

Selected Answer: A

The answer is A

upvoted 1 times

...