Which two statements are true regarding FortiGate HA configuration synchronization?

The statement regarding the checksums of devices being compared to ensure configurations are the same is accurate in the context of FortiGate High Availability (HA) configuration synchronization. In an HA setup, FortiGate units maintain consistency in their configurations to provide redundancy and failover capabilities. When changes are made to the configuration on one unit, the system calculates a checksum of the configuration and compares it with the other units in the cluster. This ensures that all units have the same configuration, which is crucial for seamless operation and failover during a hardware or network failure.

Regarding the other statements, full configuration synchronization is not always required; incremental synchronization can be utilized to minimize disruption and keep units in sync more efficiently. Additionally, while the primary unit typically initiates synchronization, changes made on any device within the HA cluster do not automatically trigger synchronization to all units—the standard behavior is that the primary unit consolidates updates and relays them to others. Thus, the focus on checksum comparison authentically addresses the continuous need for configuration integrity across HA devices.