NSE7 Enterprise Firewall and VDOMs Practice Question
An administrator is troubleshooting an HA cluster issue. The cluster consists of two FortiGate units in active-passive mode. The passive unit is showing a 'heartbeat lost' error in the logs. Which TWO configuration checks should the administrator perform to resolve this issue?
⚠ Common exam trap
Watch out — candidates often confuse the heartbeat interface's IP subnet requirement with the management interface IP subnet, leading them to incorrectly select Option D, while the actual issue is the heartbeat link's physical or IP connectivity.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Ensure the heartbeat interface is physically connected and has a valid IP address in the same subnet
The heartbeat interface must be physically connected and have a valid IP address on the same subnet for the two FortiGates to exchange HA heartbeat packets (typically UDP port 703). If the interface is down or the IPs are not in the same subnet, the passive unit will log 'heartbeat lost' and fail to maintain cluster synchronization.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Check that the HA password is the same on both units
Why it's wrong here
Password mismatch would cause authentication issues, not heartbeat loss.
- ✓
Ensure the heartbeat interface is physically connected and has a valid IP address in the same subnet
Why this is correct
Physical connectivity and IP configuration are necessary for heartbeat.
- ✗
Verify that HA override is enabled on both units
Why it's wrong here
Override setting affects failback, not heartbeat.
- ✗
Confirm that the management interface IP addresses are on the same subnet
Why it's wrong here
Management IPs should be unique per unit, not necessarily same subnet.
- ✓
Verify that the heartbeat interface is configured identically on both units
Why this is correct
Heartbeat interface must match for communication.
Visual reference
Go deeper
Related to this question
About these practice questions
Courseiva writes every NSE7 question from scratch — 940 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This NSE7 practice question is part of Courseiva's free Fortinet certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the NSE7 exam.