Question 1

How does FortiGate handle configuration of flow tracking sampling if you export the settings to amanaged FortiSwitch stack with sampling mode set to perimeter is true?

Options :

A : FortiGate configures FortiSwitch to perform ingress sampling on all switch interfaces.

B : FortiGate configures FortiSwitch to perform ingress sampling on all switch interfaces, except ICLand ISL interfaces.

C : FortiGate configures and enables flow sampling on FortiSwitch but does not change existingsampling settings of interfaces.

D : FortiGate configures and enables egress sampling on all management interfaces.

Answer: B

Question 2

Exhibit.The exhibit shows the current status of the ports on the managed FortiSwitch.Access-1.Why would FortiGate display a serial number in the Native VLAN column associated with the port23entry?

Options :

A : Port23 is a member of a trunk that uses the Access-1 FortiSwitch senal number as the name of thetrunk.

B : Port23 is configured as the dedicated management interface.

C : A standalone switch with the showm serial number is connected on por123.

D : Ports connect to adjacent FortiSwitch devices will show their.serial number as the na-tive VLAN

Answer: C

Question 3

Refer to the exhibit.Port24 is the only uplink port connected to the network where you need access to FortiSwitchmanagement services. However, FortiSwitch is not accessible on its management interface with IPaddress 10.0.13.3. Based on the configuration shown in the exhibit, which two actions should youtake to fix the issue and access FortiSwitch? (Choose two answers)

Options :

A : Change the management IP address to use the VLAN 100 subnet.

B : Change the native VLAN on port24 to VLAN 4094.

C : Remove VLAN 200 from the allowed VLANs on port24.

D : Add VLAN 4094 to the allowed VLANs on port24.

Answer: B,D

Question 4

Which three are valid actions that a FortiSwitch access control list (ACL) can apply to matching traffic?(Choose three answers)

Options :

A : Assign the VLAN ID

B : Quarantine devices

C : Traffic processing

D : Set outer VLAN tags

E : QoS

Answer: C,D,E

Question 5

You need to mirror traffic from a source port on Switch A to a monitoring device on Switch C. For thatpurpose, youre configuring Remote Switched Port Analyzer (RSPAN).1Due to the nature of RSPAN,what is the best practice when setting it up? (Choose one answer)

Options :

A : Use the same VLAN already configured for regular data traffic.

B : Use a dedicated VLAN assigned only to monitoring devices.

C : Use a dynamic VLAN that includes all switch ports.

D : Use the RSPAN VLAN as a native VLAN on all trunk ports.

Answer: B

Free NSE5_FSW_AD-7.6 Mock Exam – Practice Online Confidently

Buying Options: