Question 1

Refer to the exhibit.You configured Switched Port Analyzer (SPAN) to monitor traffic from a source port on FortiSwitch 1,but the monitoring device is connected to FortiSwitch 2. After port mirroring configuration ontiSwitch 1, the monitoring device is not receiving any mirrored traffic.What is the most likely reason the mirrored traffic is not reaching the monitoring device? (Chooseone answer)

Options :

A : SPAN does not support forwarding mirrored traffic across multiple switches.

B : SPAN traffic must be filtered with an access control list (ACL).

C : The SPAN session must be restarted after configuration.

D : The monitoring device must use a management IP in the same subnet.

Answer: A

Question 2

Refer to the exhibits.Administrator has deployed two FortiSwitch devices, Core-1 and Core-2, as multichassis linkaggregation group (MCLAG) peers. These switches are connected to FortiGate for FortiLink and to anaccess switch (Access-1) using an inter-switch link (ISL). After configuration, the administrator noticesthat both Core-1 and Core-2 are claiming to be the root bridge in the Multiple Spanning Tree Protocol(MSTP) topology. What explains this behavior? (Choose one answer)

Options :

A : FortiGate participates in MSTP and causes both switches to assume the root bridge role.

B : The ISL was not configured correctly, leading to MSTP inconsistency.

C : Both switches share the same bridge ID because MCLAG treats them as one logical switch.

D : MCLAG automatically disables STP on all peer switches.

Answer: C

Question 3

Refer to the exhibit.Port24 is the only uplink port connected to the network where you need access to FortiSwitchmanagement services. However, FortiSwitch is not accessible on its management interface with IPaddress 10.0.13.3. Based on the configuration shown in the exhibit, which two actions should youtake to fix the issue and access FortiSwitch? (Choose two answers)

Options :

A : Change the management IP address to use the VLAN 100 subnet.

B : Change the native VLAN on port24 to VLAN 4094.

C : Remove VLAN 200 from the allowed VLANs on port24.

D : Add VLAN 4094 to the allowed VLANs on port24.

Answer: B,D

Question 4

How does FortiGate handle configuration of flow tracking sampling if you export the settings to amanaged FortiSwitch stack with sampling mode set to perimeter is true?

Options :

A : FortiGate configures FortiSwitch to perform ingress sampling on all switch interfaces.

B : FortiGate configures FortiSwitch to perform ingress sampling on all switch interfaces, except ICLand ISL interfaces.

C : FortiGate configures and enables flow sampling on FortiSwitch but does not change existingsampling settings of interfaces.

D : FortiGate configures and enables egress sampling on all management interfaces.

Answer: B

Question 5

Exhibit.The exhibit shows the current status of the ports on the managed FortiSwitch.Access-1.Why would FortiGate display a serial number in the Native VLAN column associated with the port23entry?

Options :

A : Port23 is a member of a trunk that uses the Access-1 FortiSwitch senal number as the name of thetrunk.

B : Port23 is configured as the dedicated management interface.

C : A standalone switch with the showm serial number is connected on por123.

D : Ports connect to adjacent FortiSwitch devices will show their.serial number as the na-tive VLAN

Answer: C

Confidently Practice Online with Free NSE5_FSW_AD-7.6 Exam Cram

Buying Options: