Fortinet NSE5_FSW_AD-7.6 Practice Questions & Answers

Question 6 of 34

Refer to the exhibit.

Which information does FortiGate use to generate the port details in the FortiSwitch Faceplates view?

A.

The FortiSwitch model

B.

The Cisco Discovery Protocol (CDP) advertisements from FortiSwitch

C.

The LLDP advertisements received from the FortiSwitch

D.

The FortiLink discovery frames sent by FortiSwitch

Question 7 of 34

Refer to the exhibit.

Diagnose output -

The command diagnose switch physical-ports summary is executed on FortiSwitch.
Based on the VLAN assignments shown in the output, what is the most likely management configuration of this FortiSwitch?

A.

FortiSwitch is managed by FortiSwitch Cloud.

B.

FortiSwitch is managed by FortiGate.

C.

FortiSwitch is operating in standalone mode.

D.

FortiSwitch is operating in local mode.

Question 8 of 34

An administrator must deploy managed FortiSwitch devices in a remote location where multiple VLANs must be used to segment devices. No layer 3 switch or router is present at the site, and the only WAN connectivity is an ISP-provided router connected to the public internet.

Which two components are required to enable VLAN segmentation across this remote site? (Choose two.)

A.

FortiGate and FortiSwitch configured with VXLAN to tunnel VLANs over the WAN

B.

A layer 3 router at the remote location to handle inter-VLAN routing

C.

A FortiSwitch model that supports VXLAN hardware acceleration

D.

FortiSwitch and FortiGate devices configured with IPsec interfaces

E.

FortiGate with a layer 3 interface to terminate the VXLAN overlay

Question 9 of 34

Refer to the exhibits.

Network topology -

Interface configuration -

VLAN configuration -

Traffic arriving on port2 on FortiSwitch is tagged with VLAN ID 10 and destined for PC1 connected on port1. PC1 expects to receive traffic untagged from port1 on FortiSwitch.Which two configurations can you perform on FortiSwitch to ensure PC1 receives untagged traffic on port1? (Choose two.)

A.

Add VLAN ID 10 as a member of the untagged VLANs on port1.

B.

Include VLAN 10 and VLAN 20 as allowed VLANs on port1.

C.

Add the MAC address of PC1 as a member of VLAN 10.

D.

Remove VLAN 10 from the allowed VLANs and add it to untagged VLANs on port1.

Question 10 of 34

Which QoS mechanism maps packets with specific class of service (COS) or Differentiated Services Code Point (DSCP) markings to an egress queue?

A.

Classification for ingress traffic

B.

Queuing for egress traffic

C.

Policing for ingress traffic

D.

Shaping for egress traffic