Fortinet NSE6_FSW-7.2 - Fortinet NSE 6 - FortiSwitch 7.2 Exam
Page: 3 / 10
Total 50 questions
Question #11 (Topic: Exam A)
Which statement about the quarantine VLAN on FortiSwitch is true?
A. Quarantine VLAN has no DHCP server.
B. Users who fail 802.1X authentication can be placed on the quarantine VLAN.
C. It is only used for quarantined devices if global setting is set to quarantine by VLAN.
D. FortiSwitch can block devices without configuring quarantine VLAN to be part of the allowed VLANs.
Answer: B
Question #12 (Topic: Exam A)
Refer to the exhibit.
The exhibit shows the current status of the ports on the managed FortiSwitch, Access-1.
Why would FortiGate display a serial number in the Native VLAN column associated with the port23 entry?
The exhibit shows the current status of the ports on the managed FortiSwitch, Access-1.
Why would FortiGate display a serial number in the Native VLAN column associated with the port23 entry?
A. port23 is configured as the dedicated management interface.
B. Ports connected to adjacent FortiSwitch devices show their serial number as the native VLAN.
C. port23 is a member of a trunk that uses the Access-1 FortiSwitch serial number as the name of the trunk
D. A standalone switch with the shown serial number is connected on port23.
Answer: B
Question #13 (Topic: Exam A)
What are two ways in which automatic MAC address quarantine works on FortiSwitch? (Choose two.)
A. FortiSwitch supports only by VLAN quarantine mode.
B. FortiGate applies the quarantine-related configuration only on FortiGate.
C. FortiAnalyzer with a threat detection services license is required.
D. MAC address quarantine can be enabled through the FortiGate CLI only.
Answer: CD
Question #14 (Topic: Exam A)
How does FortiGate handle configuration of flow tracking sampling if you export the settings to a managed FortiSwitch stack with sampling mode set to perimeter is true?
A. FortiGate configures FortiSwitch to perform ingress sampling on all switch interfaces.
B. FortiGate configures FortiSwitch to perform ingress sampling on all switch interfaces, except ICL and ISL interfaces.
C. FortiGate configures and enables flow sampling on FortiSwitch but does not change existing sampling settings of interfaces
D. FortiGate configures and enables egress sampling on all management interfaces.
Answer: B
Question #15 (Topic: Exam A)
Refer to the exhibit.
The profile shown in the exhibit is assigned to a group of managed FortiSwitch ports, and these ports are connected to endpoints which are powered by PoE.
Which configuration action can you perform on the LLDP profile to cause these endpoints to exchange PoE information and negotiate power with the managed FortiSwitch?
The profile shown in the exhibit is assigned to a group of managed FortiSwitch ports, and these ports are connected to endpoints which are powered by PoE.
Which configuration action can you perform on the LLDP profile to cause these endpoints to exchange PoE information and negotiate power with the managed FortiSwitch?
A. Create new a LLDP-MED application type to define the PoE parameters.
B. Assign a new LDP profile to handle different LLDP-MED TLVs.
C. Define an LLDP-MED location ID to use standard protocols for power.
D. Add power management as part of LLDP-MED TLVs to advertise.
Answer: D
