NSE4 High Availability and Diagnostics Practice Question
A FortiGate administrator wants to ensure that in an active-passive HA cluster, a specific unit becomes the primary (active) unit after a reboot. Which configuration parameter should be set to a higher value on that unit?
⚠ Common exam trap
NSE4 often tests the interaction between HA priority and HA override, and candidates may forget that override must be enabled for priority to take effect in preemption.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
HA priority
In a FortiGate active-passive HA cluster, the HA priority value determines which unit becomes the primary (active) unit. The unit with the higher priority value will be elected as the primary, provided that HA override is enabled. Therefore, setting a higher HA priority on the desired unit ensures it becomes active after a reboot.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
HA session pickup delay
Why it's wrong here
HA session pickup delay is a timer (default 60 seconds) that controls how long the new active unit waits for session synchronization data from the previous active unit before it begins accepting traffic. It is a post-failover mechanism to ensure existing sessions are not dropped during a transition, but it has absolutely no role in determining which unit is elected as active. Election is decided by priority and other selection criteria, not by this delay.
- ✗
HA override
Why it's wrong here
HA override is a cluster setting that allows a unit with a higher priority to reclaim the active role after a failure has been resolved and the unit has recovered. It controls preemption behavior—specifically whether a higher-priority unit can forcibly take over from the current active unit—but it does not define how the initial election chooses the active unit. Without override enabled, the current active unit remains active even if a higher-priority unit rejoins; the election itself still uses priority as the primary criterion.
- ✓
HA priority
Why this is correct
HA priority is the configurable value (1 to 255, with higher being better) that directly determines which FortiGate unit becomes the active unit in an HA cluster. During the election process, the unit with the highest priority is selected as active; if priorities are equal, other factors like uptime and port monitoring are used as tie-breakers. This is the standard and primary method for controlling the active/standby role in FortiGate HA, making it the correct answer.
- ✗
HA group-id
Why it's wrong here
HA group-id is an integer (0 to 255) that uniquely identifies an HA cluster. All units that are part of the same HA pair or group must share the same group-id, which is used for cluster communication and to prevent accidental coupling between separate clusters. It is purely an identification and isolation parameter—it has no influence on which unit is elected active, and changing it does not affect priority or election outcomes.
Go deeper
Related to this question
About these practice questions
Courseiva writes every NSE4 question from scratch — 773 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Fortinet exam blueprint
This NSE4 practice question is part of Courseiva's free Fortinet certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the NSE4 exam.