FORTINET-NSE123 Practice Question: Nse 2 Technical Introduction TO Fortinet Security
An enterprise is deploying FortiGate High Availability (HA) in active-active mode. How does active-active mode differ from active-passive mode regarding session handling?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Active-active distributes session processing across multiple cluster units, whereas active-passive processes all traffic on a single primary unit
In active-active mode, session load is distributed across multiple cluster members using session-pickup/load-balancing mechanisms, whereas active-passive runs all traffic through the primary unit until a failover occurs.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Active-active requires manual administrator failover, while active-passive is fully automated
Why it's wrong here
Both HA modes provide automated failover via the FGCP protocol.
- ✗
Active-active disables all firewall security profiles to maximize raw throughput
Why it's wrong here
Security profiles function identically across active-active and active-passive HA clusters.
- ✓
Active-active distributes session processing across multiple cluster units, whereas active-passive processes all traffic on a single primary unit
Why this is correct
Active-active mode shares session processing across multiple active cluster members.
- ✗
Active-active eliminates the need for heartbeat cables between cluster units
Why it's wrong here
Heartbeat connections are mandatory in all FGCP clustering modes.
About these practice questions
Courseiva writes every FORTINET-NSE123 question from scratch — 298 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed August 2026 · checked against the official Fortinet exam blueprint
This FORTINET-NSE123 practice question is part of Courseiva's free Fortinet certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the FORTINET-NSE123 exam.