Question 1

Which three are valid actions that a FortiSwitch access control list (ACL) can apply to matching traffic?(Choose three answers)

Options :

A : Assign the VLAN ID

B : Quarantine devices

C : Traffic processing

D : Set outer VLAN tags

E : QoS

Answer: C,D,E

Question 2

You need to mirror traffic from a source port on Switch A to a monitoring device on Switch C. For thatpurpose, youre configuring Remote Switched Port Analyzer (RSPAN).1Due to the nature of RSPAN,what is the best practice when setting it up? (Choose one answer)

Options :

A : Use the same VLAN already configured for regular data traffic.

B : Use a dedicated VLAN assigned only to monitoring devices.

C : Use a dynamic VLAN that includes all switch ports.

D : Use the RSPAN VLAN as a native VLAN on all trunk ports.

Answer: B

Question 3

Refer to the exhibits.Administrator has deployed two FortiSwitch devices, Core-1 and Core-2, as multichassis linkaggregation group (MCLAG) peers. These switches are connected to FortiGate for FortiLink and to anaccess switch (Access-1) using an inter-switch link (ISL). After configuration, the administrator noticesthat both Core-1 and Core-2 are claiming to be the root bridge in the Multiple Spanning Tree Protocol(MSTP) topology. What explains this behavior? (Choose one answer)

Options :

A : FortiGate participates in MSTP and causes both switches to assume the root bridge role.

B : The ISL was not configured correctly, leading to MSTP inconsistency.

C : Both switches share the same bridge ID because MCLAG treats them as one logical switch.

D : MCLAG automatically disables STP on all peer switches.

Answer: C

Question 4

Refer to the exhibit.You configured Switched Port Analyzer (SPAN) to monitor traffic from a source port on FortiSwitch 1,but the monitoring device is connected to FortiSwitch 2. After port mirroring configuration ontiSwitch 1, the monitoring device is not receiving any mirrored traffic.What is the most likely reason the mirrored traffic is not reaching the monitoring device? (Chooseone answer)

Options :

A : SPAN does not support forwarding mirrored traffic across multiple switches.

B : SPAN traffic must be filtered with an access control list (ACL).

C : The SPAN session must be restarted after configuration.

D : The monitoring device must use a management IP in the same subnet.

Answer: A

Question 5

Which drop policy mode, if assigned to a congested port, will drop incoming packets until there is nocongestion on the egress port?

Options :

A : Tail-drop mode

B : Weighted round robin mode.

C : Random early detection mode

D : Strict mode

Answer: A

Confidently Practice Online with Free NSE5_FSW_AD-7.6 Exam Cram

Buying Options: