NSE5_FSW_AD-7.6 practice questions 1–10

1. Question 1 · 24 in bank

   Select 2

   Which two are valid traffic processing actions that a FortiSwitch access control list (ACL) can apply to matching traffic? (Choose two.)

   • ARedirect frames to another port.
   • BAssign traffic to a high-priority egress queue.
   • CEncrypt frames.
   • DDrop frames.

   Show answer

   Answer: AD

   Next question

2. Question 2 · 24 in bank

   Refer to the exhibit.

   

   Which information does FortiGate use to generate the port details in the FortiSwitch Faceplates view?

   • AThe FortiSwitch model
   • BThe Cisco Discovery Protocol (CDP) advertisements from FortiSwitch
   • CThe LLDP advertisements received from the FortiSwitch
   • DThe FortiLink discovery frames sent by FortiSwitch

   Show answer

   Answer: D

   Next question

3. Question 3 · 24 in bank

   Refer to the exhibit. Diagnose output -

   

   The command diagnose switch physical-ports summary is executed on FortiSwitch. Based on the VLAN assignments shown in the output, what is the most likely management configuration of this FortiSwitch?

   • AFortiSwitch is managed by FortiSwitch Cloud.
   • BFortiSwitch is managed by FortiGate.
   • CFortiSwitch is operating in standalone mode.
   • DFortiSwitch is operating in local mode.

   Show answer

   Answer: B

   Next question

4. Question 4 · 24 in bank

   Select 2

   An administrator must deploy managed FortiSwitch devices in a remote location where multiple VLANs must be used to segment devices. No layer 3 switch or router is present at the site, and the only WAN connectivity is an ISP-provided router connected to the public internet. Which two components are required to enable VLAN segmentation across this remote site? (Choose two.)

   • AFortiGate and FortiSwitch configured with VXLAN to tunnel VLANs over the WAN
   • BA layer 3 router at the remote location to handle inter-VLAN routing
   • CA FortiSwitch model that supports VXLAN hardware acceleration
   • DFortiSwitch and FortiGate devices configured with IPsec interfaces
   • EFortiGate with a layer 3 interface to terminate the VXLAN overlay

   Show answer

   Answer: AE

   Next question

5. Question 5 · 24 in bank

   Select 2

   Refer to the exhibits. Network topology -

   

   Interface configuration -

   

   VLAN configuration -

   

   Traffic arriving on port2 on FortiSwitch is tagged with VLAN ID 10 and destined for PC1 connected on port1. PC1 expects to receive traffic untagged from port1 on FortiSwitch. Which two configurations can you perform on FortiSwitch to ensure PC1 receives untagged traffic on port1? (Choose two.)

   • AAdd VLAN ID 10 as a member of the untagged VLANs on port1.
   • BInclude VLAN 10 and VLAN 20 as allowed VLANs on port1.
   • CAdd the MAC address of PC1 as a member of VLAN 10.
   • DRemove VLAN 10 from the allowed VLANs and add it to untagged VLANs on port1.

   Show answer

   Answer: AC

   Next question

6. Question 6 · 24 in bank

   Which QoS mechanism maps packets with specific class of service (COS) or Differentiated Services Code Point (DSCP) markings to an egress queue?

   • AClassification for ingress traffic
   • BQueuing for egress traffic
   • CPolicing for ingress traffic
   • DShaping for egress traffic

   Show answer

   Answer: B

   Next question

7. Question 7 · 24 in bank

   Which statement best describes a benefit of using MAC, IP address, or protocol-based VLAN assignments on FortiSwitch?

   • AIt disables 802.1X authentication while preserving user access control.
   • BIt requires devices to authenticate through a RADIUS server before VLAN tagging.
   • CIt assigns ports to VLANs regardless of device type or traffic.
   • DIt offers dynamic segmentation benefits similar to 802.1X authentication.

   Show answer

   Answer: D

   Next question

8. Question 8 · 24 in bank

   Select 2

   Refer to the exhibit. Debug output -

   

   Which two statements best describe what is displayed in the FortiLink debug output shown in the exhibit? (Choose two.)

   • AFortiSwitch is in a waiting state to join the stack group on FortiGate.
   • BFortiSwitch is sending FortiLink heartbeats to FortiGate.
   • CFortiSwitch is discovered and authorized by FortiGate.
   • DFortiSwitch is sending LLDP-MED inventory management updates to FortiGate.

   Show answer

   Answer: AB

   Next question

9. Question 9 · 24 in bank

   How does FortiSwitch determine the route for traffic traversing its interfaces?

   • AHardware-based routing on FortiSwitch is handled by the CPU.
   • BASIC hardware routing can handle only dynamic routing, if supported.
   • CFortiSwitch looks up the hardware routing table and then the forwarding information base (FIB).
   • DFortiSwitch forwards all traffic to FortiGate for routing decisions.

   Show answer

   Answer: C

   Next question

10. Question 10 · 24 in bank

    What is one key advantage of using a sniffer profile on FortiSwitch compared to using the sniffer command?

    • AIt allows packet capture on all switch ports without limitations.
    • BIt eliminates the need to use access control lists (ACLs) or port mirroring for analysis.
    • CIt automatically filters irrelevant traffic types.
    • DIt automatically decrypts SSL/TLS traffic for full packet inspection.

    Show answer

    Answer: B

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

NSE5_FSW_AD-7.6 practice, question 1. 24 questions available.