NSE5_FSW_AD-7.6 practice questions 11–20

1. Question 11 · 24 in bank

   Refer to the exhibit.

   

   The security port policy is configured as shown in the exhibit. Which behavior occurs if a device connected to the port that does not support 802.1X?

   • AThe device is blocked from accessing the network.
   • BThe device is placed into the onboarding VLAN.
   • CThe device is placed into the quarantine VLAN.
   • DThe device is assigned to the default management VLAN.

   Show answer

   Answer: B

   Next question

2. Question 12 · 24 in bank

   Select 2

   When Dynamic Host Configuration Protocol (DHCP) snooping is enabled on a FortiSwitch VLAN, which two statements are true? (Choose two.)

   • ADHCP replies are accepted only on trusted ports.
   • BDHCP snooping blocks all unicast traffic.
   • COption 82 can be inserted into DHCP requests.
   • DDHCP requests are dropped if sent from trusted ports.

   Show answer

   Answer: AC

   Next question

3. Question 13 · 24 in bank

   Refer to the exhibit. Routing Monitor -

   

   The routing monitor displays multiple route entries, but only some are installed in the forwarding information base (FIB). After analyzing the two route entries with the destination 0.0.0.0/0, which statement correctly describe why one of these routes is not installed in the FIB?

   • AThe OSPF route has a higher metric, making it less preferred than the static route.
   • BThe interface V100 for the OSPF route is down, preventing its installation.
   • CThe OSPF route with a lower administrative distance is preferred over the static route.
   • DThe two routes have identical destination prefixes, causing a conflict where only one is selected.

   Show answer

   Answer: C

   Next question

4. Question 14 · 24 in bank

   Select 2

   You are configuring VLANs on a FortiSwitch device managed by FortiGate. Which two statements accurately describe VLAN assignment requirements and behavior on FortiSwitch ports? (Choose two.)

   • AUntagged defines the list of VLANs that are allowed on the port for both ingress and egress traffic.
   • BUntagged VLAN applies to egress traffic only.
   • CYou can assign only one native VLAN on a port.
   • DVLAN assignments must be configured directly on the FortiSwitch.

   Show answer

   Answer: BC

   Next question

5. Question 15 · 24 in bank

   Refer to the exhibit. Network Topology -

   

   PC1 and PC2 are connected to port1 on FortiSwitch. Which VLAN tags will FortiSwitch apply when forwarding PC1 and PC2 traffic out of port2?

   • AFortiSwitch will tag PC1 and PC2 frames with VLAN 20.
   • BFortiSwitch will tag both PC1 and PC2 frames with VLAN 10, due to MAC override.
   • CFortiSwith will tag PC1 frames with VLAN 10 and PC2 frames with VLAN 20.
   • DFortiSwitch will leave PC1 frames untagged and will tag PC2 frames with VLAN 10.

   Show answer

   Answer: C

   Next question

6. Question 16 · 24 in bank

   Refer to the exhibit. Topology view -

   

   You just connected three FortiSwitch devices: Core-1, Core-2, and Access-1. Core-1 and Core-2 both connect to Access-1 for redundancy. All switches are managed by FortiGate, which uses port4 as the FortiLink interface. After you enable the uplink ports on Core-2, you notice that port3 on Access-1 enters the Discarding STP state. What is the most likely cause of this behavior?

   • ABridge Protocol Data Unit (BPDU) Guard is enabled, which shuts down the port after it receives BPDUs.
   • BAccess-1 is not authorized by FortiGate.
   • CCore-2 has the lowest bridge priority.
   • DFortiGate is not running Spanning Tree Protocol (STP) on the FortiLink interface.

   Show answer

   Answer: D

   Next question

7. Question 17 · 24 in bank

   When you change FortiSwitch management mode from standalone to managed, what happens to the existing standalone configuration?

   • AFortiSwitch registers to FortiSwitch Cloud to save a copy before managing with FortiGate.
   • BFortiSwitch merges the existing standalone configuration with the default FortiLink configuration.
   • CFortiSwitch saves the standalone configuration and changes to the default FortiLink configuration.
   • DFortiGate automatically saves the existing FortiSwitch configuration during the FortiLink management process.

   Show answer

   Answer: C

   Next question

8. Question 18 · 24 in bank

   Select 2

   In which two ways can you assign a FortiSwitch port to a VDOM using a multi-tenancy setup? (Choose two.)

   • AAssign the switch port to a VLAN on FortiGate and perform VDOM mapping
   • BCreate a virtual port pool on the FortiGate CLI.
   • CAssign a port to a VDOM directly on the managed FortiSwitch.
   • DSwitch the FortiLink interface to the target VDOM.

   Show answer

   Answer: BC

   Next question

9. Question 19 · 24 in bank

   You enable Dynamic Host Configuration Protocol (DHCP) snooping on a VLAN and configure a FortiSwitch port as trusted for DHCP snooping. What additional step is required to configure the port as trusted for Dynamic ARP Inspection (DAI)?

   • AEnable IP Source Guard (IPSG) on the port.
   • BManually set the port as trusted for DAI through the CLI.
   • CDAI implicitly trusts the port.
   • DEnable static MAC learning on the port.

   Show answer

   Answer: C

   Next question

10. Question 20 · 24 in bank

    Select 3

    Which three are valid actions that a FortiSwitch access control list (ACL) can apply to matching traffic? (Choose three.)

    • AAssign the VLAN ID
    • BQoS
    • CTraffic processing
    • DQuarantine devices
    • ESet outer VLAN tags

    Show answer

    Answer: BCE

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

NSE5_FSW_AD-7.6 practice, question 11. 24 questions available.