NSE4 High Availability and Diagnostics Practice Question
A FortiGate administrator needs to check the current HA status of a two-unit cluster. The administrator wants to see which unit is the primary, the HA mode, and the uptime of each unit. Which command should the administrator use?
⚠ Common exam trap
Many exam-takers confuse configuration commands like 'show system ha' with status commands; 'show' displays settings, while 'diagnose sys ha status' reveals real-time operational status.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
diagnose sys ha status
To view the current HA status, including which unit is primary, the HA mode, and uptime, the administrator should use 'diagnose sys ha status'. This command provides a comprehensive overview of the cluster's operational state and is the standard tool for HA monitoring and troubleshooting.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
diagnose sys ha status
Why this is correct
The 'diagnose sys ha status' command displays detailed HA status information, including the current primary unit, HA mode, cluster uptime, and the status of each member. It is the correct command to quickly assess the HA cluster's health and roles. This command is commonly used for troubleshooting and verification.
- ✗
show system ha
Why it's wrong here
'show system ha' displays the HA configuration settings, not the current status or which unit is primary. It shows parameters like mode, group ID, and priorities, but not real-time status such as uptime or primary election. To see status, the diagnose command is required.
- ✗
diagnose sys ha checksum
Why it's wrong here
'diagnose sys ha checksum' is used to verify configuration synchronization between HA members by comparing checksums. It does not display HA status, primary unit, or uptime. While useful for ensuring consistency, it does not provide the overview the administrator needs in this scenario.
- ✗
get system ha status
Why it's wrong here
'get system ha status' is not a valid FortiGate command. The correct syntax uses 'diagnose sys ha status' or 'get system ha' for configuration. Using an incorrect command will return an error and not provide the needed information. Administrators should use the diagnose command for status checks.
Go deeper
Related to this question
About these practice questions
This NSE4 question is part of Courseiva's 773-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Fortinet exam blueprint
This NSE4 practice question is part of Courseiva's free Fortinet certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the NSE4 exam.