Fortinet NSE8_812 Exam - Topic 1 Question 4 Discussion

Actual exam question for Fortinet's NSE8_812 exam

Question #: 4
Topic #: 1

Refer to the exhibit, which shows the high availability configuration for the FortiAuthenticator (FAC1).

Based on this information, which statement is true about the next FortiAuthenticator (FAC2) member that will join an HA cluster with this FortiAuthenticator (FAC1)?

AFAC2 can only process requests when FAC1 fails.

BFAC2 can have its HA interface on a different network than FAC1.

CThe FortiToken license will need to be installed on the FAC2.

DFSSO sessions from FAC1 will be synchronized to FAC2.

Show Suggested Answer

Suggested Answer: D

When FortiAuthenticator operates in cluster mode, it provides active-passive failover and synchronization of all configuration and data, including FSSO sessions, between the cluster members. Therefore, if FAC1 is the active unit and FAC2 is the standby unit, any FSSO sessions from FAC1 will be synchronized to FAC2. If FAC1 fails, FAC2 will take over the active role and continue to process the FSSO sessions. Reference: https://docs.fortinet.com/document/fortiauthenticator/6.1.2/administration-guide/122076/high-availability

by Ashlyn at Jul 08, 2023, 06:00 PM

Limited Time Offer

25%

Off

Get Premium NSE8_812 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Aliza

3 months ago

I thought the license was only for FAC1, not FAC2.

upvoted 0 times

...

Candida

3 months ago

FSSO sync is a must for HA setups!

upvoted 0 times

...

Margot

4 months ago

Wait, can FAC2 really be on a different network?

upvoted 0 times

...

Glory

4 months ago

Totally agree, FAC2 is active-active!

upvoted 0 times

...

Annice

4 months ago

FAC2 can process requests even if FAC1 is up.

upvoted 0 times

...

Muriel

4 months ago

I believe FSSO sessions are synchronized between the two FortiAuthenticators, but I'm not entirely certain if that applies to all session types.

upvoted 0 times

...

Adelle

4 months ago

I feel like the FortiToken license requirement for FAC2 is something I read about, but I can't remember if it's mandatory or not.

upvoted 0 times

...

Ellen

5 months ago

I think I came across a similar question about HA interfaces. If I recall correctly, FAC2 can have its HA interface on a different network than FAC1, but I need to double-check that.

upvoted 0 times

...

Angelyn

5 months ago

I remember studying HA configurations, but I'm not sure if FAC2 can only process requests when FAC1 fails. That seems too limiting for an HA setup.

upvoted 0 times

...

Elroy

5 months ago

The key here is to identify the correct data quality improvement check that can be implemented using SAP and non-SAP external solutions. I'll carefully consider each option.

upvoted 0 times

...

Yuette

5 months ago

Hmm, I'm not too sure about this one. I think I'd want to do some research on relevant AppExchange packages first before jumping into the design work. That could save a lot of time.

upvoted 0 times

...

Elfrieda

5 months ago

Hmm, I'm a bit unsure about the negotiation process stages. I'll have to think through each statement carefully to determine which ones are incorrect.

upvoted 0 times

...

Junita

5 months ago

I'm a bit confused on this one. I'm not entirely sure which elements are mandatory in the ruleset path. I'll need to re-read the question and options carefully to try to figure this out.

upvoted 0 times

...

Dominic

5 months ago

This looks like a tricky question. I'll need to think it through step-by-step to determine the right answer.

upvoted 0 times

...