Home / Fortinet / NSE6_FSW-7.2

Fortinet NSE6_FSW-7.2 Practice Test - Questions Answers, Page 4

Question list

List of questions

Question 31

(0)

How does FortiSwitch perform actions on ingress and egress traffic using the access control list (ACL)?

Question 32

(0)

An administrator needs to deploy managed FortiSwitch devices in a remote location where multiple VLANs must be utilized to segment devices. No Layer 3 switch or router is present. The the only WAN c

Question 33

(0)

Which statement about the configuration of VLANs on a managed FortiSwitch port is true?

Question 34

(0)

Exhibit. port24 is the only uplink port connected to the network where access to FortiSwitch management services is possible. However, FortiSwitch is still not accessible on the management interf

Question 35

(0)

How are the 'by VLAN redirect MAC address quarantine' mode and the 'by redirect MAC address quarantine' mode on FortiGate similar?

Question 36

(0)

What type of multimode transceiver can be used to split a 40G port?

Question 37

(0)

Which two statements about 802.1X authentication on FortiSwitch ports are true? (Choose two.)

Question 38

(0)

Which two statements about managing a FortiSwitch stack on FortiGate are true? (Choose two.)

Question 39

(0)

How is traffic routed on FortiSwitch?

Question 40

(0)

Exhibit. LAG and MCLAG are used to increase the available network bandwidth and enable redundancy. How does spanning tree protocol see MCLAG and LAG if they are configured based on the physi-cal

Question 31

How does FortiSwitch perform actions on ingress and egress traffic using the access control list (ACL)?

Only high-end FortiSwitch models support ACL.

ACL can be used only at the prelookup stage in the traffic processing pipeline.

Classifiers enable matching traffic based only on the VLAN ID.

FortiSwitch checks ACL policies only from top to bottom.

Show Answer Comment (0)

An administrator needs to deploy managed FortiSwitch devices in a remote location where multiple VLANs must be utilized to segment devices. No Layer 3 switch or router is present. The the only WAN connectivity is the router provided by the ISP connected to the public internet.

Which two items will the administrator need to use? (Choose two.)

A FortiSwitch interface connected to the ISP router configured with fortilink-13-mode enabled.

FortiSwitch and FortiGate devices configured with VXLAN interfaces.

FortiSwitch devices configured with NAT disabled.

FortiSwitch devices that have the required internal hardware for this configuration.

FortiSwitch and FortiGate devices configured with IPsec interfaces.

Show Answer Comment (0)

Question 33

Which statement about the configuration of VLANs on a managed FortiSwitch port is true?

Untagged VLANs must be part of the allowed VLANs: ingress and egress.

FortiSwitch VLAN interfaces are created only when FortiSwitch is managed by Forti-Gate.

The native VLAN is implicitly part of the allowed VLAN on the port.

Allowed VLANS expand the collision domain to the port.

Show Answer Comment (0)

Question 34

Exhibit.

port24 is the only uplink port connected to the network where access to FortiSwitch management services is possible. However, FortiSwitch is still not accessible on the management interface. Which two actions should you take to fix the issue and access FortiSwitch? (Choose two.)

You must add port24 native VLAN as an allowed VLAN on internal.

You must add VLAN ID 200 to the allowed VLANS on internal.

You must allow VLAN ID 4094 on port24, if management traffic is tagged.

You should use VLAN ID 4094 as the native VLAN on port24.

Show Answer Comment (0)

Question 35

How are the 'by VLAN redirect MAC address quarantine' mode and the 'by redirect MAC address quarantine' mode on FortiGate similar?

Both modes move quarantined devices to the quarantine VLAN.

Both modes require firewall policies to block inter-VLAN traffic.

Both modes add quarantined device MAC addresses to the blocked firewall address group.

Both modes block intra-VLAN traffic by FortiGate automatically.

Show Answer Comment (0)

Question 36

What type of multimode transceiver can be used to split a 40G port?

QSFP+ transceiver

SFP transceiver

QSFP transceiver

SFP+ transceiver

Show Answer Comment (0)

Question 37

Which two statements about 802.1X authentication on FortiSwitch ports are true? (Choose two.)

All hosts behind an authenticated port are allowed access after a successful authentica-tion.

A security policy is used to apply 802.1 authentication on a port.

A local user database must be used to authenticate devices using the 802.1X authentica-tion protocol.

All devices connecting to FortiSwitch must support 802.1X authentication.

Show Answer Comment (0)

Question 38

Which two statements about managing a FortiSwitch stack on FortiGate are true? (Choose two.)

A FortiLink interface must be enabled on FortiGate.

The switch controller feature must be enabled on FortiGate.

Only a hardware-based FortiGate can manage a FortiSwitch stack.

FortiSwitch must be operating in standalone mode before authorization.

Show Answer Comment (0)

Question 39

How is traffic routed on FortiSwitch?

Hardware-based routing on FortiSwitch is handled by the CPU.

FortiSwitch looks up the hardware routing table and then the forwarding information base (FIB).

ASIC hardware routing can only handle dynamic routing, if supported.

Layer 3 routing can be configured on FortiSwitch, while managed by FortiGate.

Show Answer Comment (0)

Question 40

Exhibit.

LAG and MCLAG are used to increase the available network bandwidth and enable redundancy. How does spanning tree protocol see MCLAG and LAG if they are configured based on the physi-cal view shown in the exhibit? (Choose two)

Switch 1. Switch 2, and Switch 3 are seen as one MCLAG peer group

Switch 3 and Switch 4 uplinks are treated as single interfaces.

Switch 3 and switch 4 are seen as one MCLAG switch client

Switch 1 and Switch 2 both seen as one single switch.

Show Answer Comment (0)

Total 56 questions