Question 1

Which three are valid actions that a FortiSwitch access control list (ACL) can apply to matching traffic?(Choose three answers)

Options :

A : Assign the VLAN ID

B : Quarantine devices

C : Traffic processing

D : Set outer VLAN tags

E : QoS

Answer: C,D,E

Question 2

(Full question statement start from here)What is one key advantage of using a sniffer profile on FortiSwitch compared to using the sniffercommand? (Choose one answer)

Options :

A : It allows packet capture on all switch ports without limitations.

B : It eliminates the need to use access control lists (ACLs) or port mirroring for analysis.

C : It automatically filters irrelevant traffic types.

D : It automatically decrypts SSL/TLS traffic for full packet inspection.

Answer: A

Question 3

How is traffic routed on FortiSwitch?

Options :

A : Hardware-based routing on FortiSwitch is handled by the CPU.

B : FortiSwitch looks up the hardware routing table and then the forwarding information base (FIB).

C : ASIC hardware routing can only handle dynamic routing, if supported.

D : Layer 3 routing can be configured on FortiSwitch, while managed by FortiGate.

Answer: D

Question 4

You need to mirror traffic from a source port on Switch A to a monitoring device on Switch C. For thatpurpose, youre configuring Remote Switched Port Analyzer (RSPAN).1Due to the nature of RSPAN,what is the best practice when setting it up? (Choose one answer)

Options :

A : Use the same VLAN already configured for regular data traffic.

B : Use a dedicated VLAN assigned only to monitoring devices.

C : Use a dynamic VLAN that includes all switch ports.

D : Use the RSPAN VLAN as a native VLAN on all trunk ports.

Answer: B

Question 5

Which drop policy mode, if assigned to a congested port, will drop incoming packets until there is nocongestion on the egress port?

Options :

A : Tail-drop mode

B : Weighted round robin mode.

C : Random early detection mode

D : Strict mode

Answer: A

Free NSE5_FSW_AD-7.6 Mock Exam – Practice Online Confidently

Buying Options: