Free Fortinet FCP_FSA_AD-5.0 Practice Exam with Questions & Answers | Set: 2

From the High Availability and Management lesson, the Study Guide states:

" You use the hc-settings command and options to configure the main HA settings, such as enable HA, and to configure the node ' s mode of operation, node alias, group name, group password, and the HA interface. "

The CLI flags breakdown:

-sc = Set configuration

-t = Node type flag where N = Secondary node

-n = Node alias (SecondaryNode)

-c = Cluster/group name (FSAGrp)

-p = Password

-i = HA interface (port4)

The Study Guide confirms the secondary node type uses -tN designation. Option B (-tM) represents the primary/master node, Option C (-tP) and Option D (-tR) are not valid node type designators for secondary nodes in the FortiSandbox HA CLI syntax.

From the Lab Guide (Exercise 4 - Using Inline Scanning) , the following is stated:

" FortiGate and FortiSandbox communicate through port 4443. Management or API ports grant access through port 4443. "

And the CLI command used:

" Enter the following command to enable API access on port2: set api-port port2 "

This confirms:

Option B is correct: Port 4443 uses HTTPS only — API ports will not accept HTTP traffic.

Option C is correct: The API port configuration must be performed using the CLI (set api-port port2), as there is no GUI option for this.

Option A is incorrect: The Study Guide states port3 cannot be a management port, and HA communication ports have dedicated roles that are not interchangeable with API ports.

Option D is incorrect: The CLI command sets the API port directly without requiring a separate administrative interface designation.