Question 1

Refer to the exhibit.Which two statements best describe what is displayed in the FortiLink debug output shown in theexhibit? (Choose two.)

Options :

A : FortiSwitch is sending FortiLink heartbeats to FortiGate.

B : FortiSwitch is discovered and authorized by FortiGate.

C : FortiSwitch is in a waiting state to join the stack group on FortiGate.

D : FortiSwitch is ready to push its new hostname to FortiGate.

Answer: A,B

Question 2

(Full question statement start from here)What is one key advantage of using a sniffer profile on FortiSwitch compared to using the sniffercommand? (Choose one answer)

Options :

A : It allows packet capture on all switch ports without limitations.

B : It eliminates the need to use access control lists (ACLs) or port mirroring for analysis.

C : It automatically filters irrelevant traffic types.

D : It automatically decrypts SSL/TLS traffic for full packet inspection.

Answer: A

Question 3

How does FortiGate handle configuration of flow tracking sampling if you export the settings to amanaged FortiSwitch stack with sampling mode set to perimeter is true?

Options :

A : FortiGate configures FortiSwitch to perform ingress sampling on all switch interfaces.

B : FortiGate configures FortiSwitch to perform ingress sampling on all switch interfaces, except ICLand ISL interfaces.

C : FortiGate configures and enables flow sampling on FortiSwitch but does not change existingsampling settings of interfaces.

D : FortiGate configures and enables egress sampling on all management interfaces.

Answer: B

Question 4

Refer to the exhibit.Port24 is the only uplink port connected to the network where you need access to FortiSwitchmanagement services. However, FortiSwitch is not accessible on its management interface with IPaddress 10.0.13.3. Based on the configuration shown in the exhibit, which two actions should youtake to fix the issue and access FortiSwitch? (Choose two answers)

Options :

A : Change the management IP address to use the VLAN 100 subnet.

B : Change the native VLAN on port24 to VLAN 4094.

C : Remove VLAN 200 from the allowed VLANs on port24.

D : Add VLAN 4094 to the allowed VLANs on port24.

Answer: B,D

Question 5

You need to mirror traffic from a source port on Switch A to a monitoring device on Switch C. For thatpurpose, youre configuring Remote Switched Port Analyzer (RSPAN).1Due to the nature of RSPAN,what is the best practice when setting it up? (Choose one answer)

Options :

A : Use the same VLAN already configured for regular data traffic.

B : Use a dedicated VLAN assigned only to monitoring devices.

C : Use a dynamic VLAN that includes all switch ports.

D : Use the RSPAN VLAN as a native VLAN on all trunk ports.

Answer: B

Free NSE5_FSW_AD-7.6 Mock Exam – Practice Online Confidently

Buying Options: