FCP_FGT_AD-7-4 practice question 22 of 35

Which two statements are true about the FGCP protocol? (Choose two.)

Full set: 267 questions
Answer options
A: FGCP is not used when FortiGate is in transparent mode
B: FGCP elects the primary FortiGate device Correct answer
C: FGCP is used to discover FortiGate devices in different HA groups
D: FGCP runs only over the heartbeat links Correct answer
Correct Answer:
B. FGCP elects the primary FortiGate device; D. FGCP runs only over the heartbeat links
Explanation

The FortiGate Clustering Protocol (FGCP) is the proprietary protocol that manages all communication within a FortiGate High Availability (HA) cluster. A primary function of FGCP is to run the election process to determine which unit becomes the primary (or active) device. This protocol's communication, which includes heartbeats for health monitoring, configuration synchronization, and session synchronization, is exclusively transmitted over the designated heartbeat links. This ensures that HA traffic is isolated from regular data traffic, providing reliability and security for the cluster's operation.

Why Incorrect

A. FortiGate HA, which relies on the FGCP protocol, is fully supported and functional in both NAT/Route mode and Transparent mode.
C. FGCP facilitates communication within a single HA cluster. It is not designed to discover or communicate with FortiGate devices that are part of different HA groups.

References

1. Fortinet FortiOS 7.0 Administration Guide

High Availability > How FGCP works.

"The FGCP is a proprietary HA protocol that handles all of the communication between FortiGates in a cluster. FGCP communication includes synchronizing the cluster

negotiating the primary unit

and sending heartbeat packets to detect when a cluster unit has failed." (Supports option B)

"The FGCP sends heartbeat packets over the heartbeat link to make sure that all of the cluster units are operating." (Supports option D)

2. Fortinet FortiOS 7.0 Administration Guide

High Availability > HA requirements.

"All FortiGates in the cluster must be the same model... must have the same firmware build... must have the same hardware configuration... and must be able to operate in the same operating mode (NAT or transparent)." (Contradicts option A)

3. Fortinet FortiOS 7.0 High Availability Guide

Introduction to FortiGate HA > How FGCP works.

"The FGCP communicates between the FortiGates in the cluster over the heartbeat link." (Supports option D)

"The FGCP elects a primary FortiGate." (Supports option B)

The scope of FGCP is defined as communication "between the FortiGates in the cluster

" which implicitly contradicts the idea of discovering devices in different groups. (Contradicts option C)

Scroll to Top