Fortinet NSE6_FSW-7.2 Quiz 1 Topic 1 Questions 1-5

Question: 1

Which packet capture method allows FortiSwitch to capture traffic on trunks and management interfaces?

ASPAN

BSniffer profile

CsFlow

DTCP dump

Show Answer

Question: 2

Which statement about using MAC, IP, and protocol-based VLANs on FortiSwitch is true?

Alt is a scalable and secure solution in comparison to other Layer 2 security measures.

BFortiSwitch uses only the Ethernet type to assign traffic to VLANs.

CIt provides benefits that can be obtained when using 802.1X authentication.

DEndpoints are required to use the same FortiSwitch port to remain members of the VLAN.

Show Answer

Question: 3

Which LLDP-MED Type-Length-Values does FortiSwitch collect from endpoints to track network devices and determine their characteristics?

ANetwork policy

BPower management

CLocation

DInventory management

Show Answer

Question: 4

How does FortiGate handle configuration of flow tracking sampling if you export the settings to a managed FortiSwitch stack with sampling mode set to perimeter is true?

AFortiGate configures FortiSwitch to perform ingress sampling on all switch interfaces.

BFortiGate configures FortiSwitch to perform ingress sampling on all switch interfaces, except ICL and ISL interfaces.

CFortiGate configures and enables flow sampling on FortiSwitch but does not change existing sampling settings of interfaces.

DFortiGate configures and enables egress sampling on all management interfaces.

Show Answer

Question: 5

Which two statements about 802.1X authentication on FortiSwitch ports are true? (Choose two.)

AAll hosts behind an authenticated port are allowed access after a successful authentica-tion.

BA security policy is used to apply 802.1 authentication on a port.

CA local user database must be used to authenticate devices using the 802.1X authentica-tion protocol.

DAll devices connecting to FortiSwitch must support 802.1X authentication.

Show Answer

Fortinet NSE6_FSW-7.2 Quiz:1 Topic:1 Questions:1-5