NSE4 High Availability and Diagnostics Practice Question
What is the purpose of the 'override' setting in FortiGate HA?
⚠ Common exam trap
NSE4 often tests the difference between HA priority and override, where candidates might think priority alone causes failback, but without override, the original primary does not automatically reclaim the role.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
It enables the higher-priority unit to reclaim the primary role after recovery
The 'override' setting in FortiGate HA allows a higher-priority unit to reclaim the primary role after it recovers from a failure. Without override, the primary role does not automatically revert to the original unit even if it comes back online with a higher priority. This ensures predictable failback behavior.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
It enables the higher-priority unit to reclaim the primary role after recovery
Why this is correct
Override is an HA election control in FortiGate. When enabled, if a unit with a higher configured priority fails and later recovers, it will preempt the current primary (which may have a lower priority) and reclaim the primary role automatically. This ensures the preferred unit is always active after recovery, but it can cause a brief service interruption. Without override, the recovered higher-priority unit would rejoin the cluster as a secondary and remain so until the active primary fails.
- ✗
It allows management access to the cluster via a virtual IP
Why it's wrong here
This confuses the HA override function with cluster management access. FortiGate HA clusters can provide management access through a separate virtual management IP (e.g., the cluster management IP or HA management interface), which is configured independently of HA election settings. Override only affects which unit becomes primary after a failure recovery; it does not create or influence any virtual IP for management or data traffic.
- ✗
It disables HA failover during maintenance windows
Why it's wrong here
Override does not provide any mechanism to temporarily disable failover. Maintenance windows are typically handled via administrative commands such as 'execute ha config-ignore' or by placing units into maintenance mode to prevent failover during upgrades. The override setting solely determines whether a recovered higher-priority unit can take over from a lower-priority active primary; it has no effect on the failover triggers caused by interface, heartbeat, or session-loss events.
- ✗
It forces the secondary unit to become primary immediately
Why it's wrong here
Override does not force an immediate role change. A secondary unit will only become primary if the current primary fails or is administratively taken over (e.g., with 'execute ha takeover'). The override setting enables a higher-priority unit to reclaim the primary role *after it recovers* from a failure, not to preempt a healthy primary or to switch roles on demand. Therefore, this option misrepresents the conditional and recovery-based nature of the override feature.
Go deeper
Related to this question
About these practice questions
This NSE4 question is part of Courseiva's 773-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Fortinet exam blueprint
This NSE4 practice question is part of Courseiva's free Fortinet certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the NSE4 exam.