NSE4 High Availability and Diagnostics Practice Question
A FortiGate HA cluster is experiencing frequent failovers. The administrator checks the HA event log and sees repeated 'Heartbeat loss' messages. The heartbeat interfaces are connected directly via a crossover cable. What is the MOST likely cause?
⚠ Common exam trap
NSE4 often tests physical-layer causes of HA instability; the trap is overlooking duplex mismatch and instead blaming HA settings like override or session pickup.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The heartbeat interface has a duplex mismatch
A duplex mismatch on the heartbeat interface causes intermittent link errors and dropped heartbeat packets, leading to repeated 'Heartbeat loss' messages and frequent failovers. Since the interfaces are directly connected via crossover cable, a speed/duplex mismatch is the most likely physical-layer cause.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
The session pickup option is enabled
Why it's wrong here
Enabling session pickup (session-pickup) configures the cluster to synchronize the TCP/UDP session table to the standby unit so active sessions survive a failover without re-establishment. It does not influence HA heartbeat transmission, heartbeat timeout, or failover triggers. Heartbeat loss is the sole mechanism that causes the cluster to declare the peer dead and initiate a failover, so session pickup being enabled cannot produce intermittent or frequent failovers.
- ✗
The HA uptime monitor is enabled and tracking a failed interface
Why it's wrong here
The HA uptime monitor (config system ha monitor) watches specific data interfaces and forces a failover only when one of those monitored link states goes down. It does not monitor the heartbeat interface or its packet continuity; a failed monitored interface would cause a discrete failover or hold the unit as non-primary, but it would not cause repeated heartbeat-loss failovers. The scenario describes frequent failovers caused by an unstable heartbeat link, which is unrelated to a data interface being down.
- ✗
The HA override setting is disabled
Why it's wrong here
The HA override setting controls whether a previously failed primary with a higher priority automatically preempts a lower-priority active unit when it recovers. Disabling override simply prevents that preemption from happening; it does not affect heartbeat packet generation, detection, or the cluster's failover decision based on lost heartbeats. Without override, failovers only occur when the current primary becomes unreachable — it does not cause additional failovers.
- ✓
The heartbeat interface has a duplex mismatch
Why this is correct
A duplex mismatch on the heartbeat interface is the classic cause of intermittent heartbeat loss: one side runs at full duplex and the other at half duplex, leading to late collisions, CRC errors, and frame drops that tend to occur in bursts. These dropped frames are exactly what the HA process sees as a missing heartbeat. If the heartbeat timeout is repeatedly exceeded, the cluster concludes the peer is down and triggers a failover; once traffic resumes, another lost burst starts the cycle, producing the observed frequent failovers.
Go deeper
Related to this question
About these practice questions
One of 773 original NSE4 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Fortinet exam blueprint
This NSE4 practice question is part of Courseiva's free Fortinet certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the NSE4 exam.