NSE6_FSW-7.2 Braindumps PDF, Fortinet NSE6_FSW-7.2 Exam Cram [Q21-Q45]

NEW QUESTION 21
Which two statements about 802.1X authentication on FortiSwitch ports are true? (Choose two.)

All hosts behind an authenticated port are allowed access after a successful authentica-tion.

A security policy is used to apply 802.1 authentication on a port.

A local user database must be used to authenticate devices using the 802.1X authentica-tion protocol.

All devices connecting to FortiSwitch must support 802.1X authentication.

NEW QUESTION 22
Refer to the exhibit.

Which two statements best describe what is displayed in the FortiLink debug output shown in the exhibit? (Choose two.)

FortiSwitch is sending FortiLink heartbeats to FortiGate.

FortiSwitch is discovered and authorized by FortiGate.

FortiSwitch is in a waiting state to join the stack group on FortiGate.

FortiSwitch is ready to push its new hostname to FortiGate.

NEW QUESTION 23
Which two statements about the FortiLink authorization process are true? (Choose two.)

The administrator must manually pre-authorize FortiGate on FortiSwitch by adding the FortiGate serial number.

FortiSwitch requires a reboot to complete the authorization process.

A FortiLink frame is sent by FortiGate to FortiSwitch to complete the authorization.

FortiLink authorization sets the FortiSwitch management mode to FortiLink.

NEW QUESTION 24
What are two ways in which automatic MAC address quarantine works on FortiSwitch? (Choose two.)

FortiSwitch supports only by VLAN quarantine mode.

FortiGate applies the quarantine-related configuration only on FortiGate.

FortiAnalyzer with a threat detection services license is required.

MAC address quarantine can be enabled through the FortiGate CLI only.

NEW QUESTION 25
Refer to the exhibits

Traffic arriving on port2 on FortiSwitch is tagged with VLAN ID 10 and destined for PC1 connected on port1. PC1 expects to receive traffic untagged from port1 on FortiSwitch.
Which two configurations can you perform on FortiSwitch to ensure PC1 receives untagged traffic on port1? (Choose two.)

Add the MAC address of PCI as a member of VLAN 10.

Add VLAN ID 10 as a member of the untagged VLANs on port1.

Remove VLAN 10 from the allowed VLANs and add it to untagged VLANs on port1.

Enable Private VLAN on VLAN 10 and add VLAN 20 as an isolated VLAN.

NEW QUESTION 26
Which statement about the use of the switch port analyzer (SPAN) packet capture method is true?

Mirrored traffic can be sent across multiple switches.

SPAN can be configured only on a standalone FortiSwitch.

Traffic on the management interface can be mirrored and captured by the monitoring device.

The monitoring device must be connected to the same switch where the traffic is being mirrored

NEW QUESTION 27
Exhibit.

LAG and MCLAG are used to increase the available network bandwidth and enable redundancy. How does spanning tree protocol see MCLAG and LAG if they are configured based on the physi-cal view shown in the exhibit? (Choose two)

Switch 1. Switch 2, and Switch 3 are seen as one MCLAG peer group

Switch 3 and Switch 4 uplinks are treated as single interfaces.

Switch 3 and switch 4 are seen as one MCLAG switch client

Switch 1 and Switch 2 both seen as one single switch.

NEW QUESTION 28
FortiGate is unable to establish a tunnel with the FortiSwitch device it is supposed to manage Based on the debug output shown in the exhibit, what is the reason for the failure?

The handshake process timed out before FortiSwitch responded.

DTLS client hello had the incorrect pre-shared key.

The CAPWAP tunnel failed to come up due to a mismatch in time.

FortiSwitch has disabled FortiLink and is only managed as a standalone.

NEW QUESTION 29
Exhibit.

You need to manage three FortiSwitch devices using a FortiGate device. Two of the FortiSwitch devices initiated a reboot after the authorization process. However, the FortiSwitch device with the configuration shown in the exhibit. did not reboot All three devices completed FortiLink manage-ment authorization successfully.
Why did the FortiSwitch device shown in the exhibit not reboot to complete the authorization pro-cess?
The management mode was set to use FortiLink mode.

Switch auto-discovery is enabled.

The management mode was set to use FortiLink mode.

The FortiSwitch device is scheduled to reboot as part the authorization process

The system time is not in-sync and is using a non-default value

NEW QUESTION 30
Which interfaces on FortiSwitch send out FortiLink discovery frames by default in order to detect a FortiGate with an enabled FortiLink interface?

All ports have auto-discovery enabled by default.

No ports are enabled by default for auto-discovery. This must be configured under config switch interface.

The ports with auto-discovery enabled by default are dependent upon the FortiSwitch model.

The last four switch ports on FortiSwitch have auto-discovery enabled by default.

NEW QUESTION 31
Refer to the exhibit.

The exhibit shows the current status of the ports on the managed FortiSwitch. Access-1.
Why would FortiGate display a serial number in the Native VLAN column associated with the port23 entry?

port23 is configured as the dedicated management interface.

Ports connected to adjacent FortiSwitch devices show their serial number as the native VLAN.

port23 is a member of a trunk that uses the Access-1 FortiSwitch serial number as the name of the trunk.

A standalone switch with the shown serial number is connected on port23.

NEW QUESTION 32
Which two rules used by MSTP are similar to rules used by other STP methods? (Choose two.)

MSTP uses port role election, similar to rapid STP on the instances.

MSTP uses alternate path and primary path, similar to regular STP.

MSTP uses root bridge selection, similar to rapid STP

MSTP uses timers for transitioning the ports, similar to regular STP.

NEW QUESTION 33
Refer to the diagnostic output:

What makes the use of the sniffer command on the FortiSwitch CLI unreliable on__port__23?

The types of packets captured is limited.

Just the port egress payloads are printed on CLI.

Only untagged VLAN traffic can be captured.

The switch port might be used as a trunk member

NEW QUESTION 34
Which LLDP-MED Type-Length-Values does FortiSwitch collect from endpoints to track network devices and determine their characteristics?

Network policy

Power management

Location

Inventory management

NEW QUESTION 35
Exhibit.

Which configuration change will allow the managed FortiSwitch to accept SNMP requests from any source?

Create a new local access profile for SNMP only.

Enable SNMP on the internal interface of the switch.

Configure an SNMP host to send SNMP traps.

Add SNMP service on the management interface of the switch.

NEW QUESTION 36
What type of multimode transceiver can be used to split a 40G port?

QSFP+ transceiver

SFP transceiver

QSFP transceiver

SFP+ transceiver

NEW QUESTION 37
What can an administrator do to maintain the existing standalone FortlSwltch configuration while changing the management mode to FortLink?

Use a migration tool based on python script to convert the configuration

Enable the Forti-link setting on FortiSwitch before the authorization process

FortiGate will automatically save the existing FortiSwitch configuration during the Forti-link management process.

Register FortiSwitch to For1ISwitch Cloud to save a copy before managing by Forti-Gate.

NEW QUESTION 38
Exhibit.

port24 is the only uplink port connected to the network where access to FortiSwitch management services is possible. However, FortiSwitch is still not accessible on the management interface. Which two actions should you take to fix the issue and access FortiSwitch? (Choose two.)

You must add port24 native VLAN as an allowed VLAN on internal.

You must add VLAN ID 200 to the allowed VLANS on internal.

You must allow VLAN ID 4094 on port24, if management traffic is tagged.

You should use VLAN ID 4094 as the native VLAN on port24.

NEW QUESTION 39
Refer to the diagnostic output:

Two entries in the exhibit show that the same MAC address has been used in two different VLANs. Which MAC address is shown in the above output?

It is a MAC address of FortiLink interface on FortiGate.

It is a MAC address of a switch that accepts multiple VLANs.

It is a MAC address of an upstream FortiSwitch.

It is a MAC address of FortiGate in HA configuration.

NEW QUESTION 40
What is the role of a device that is simultaneously functioning as both the distribution and core in the hierarchy network model?

POE with high density FortiSwitch

FortiGate managing FortiSwitch

FortiSwitch functioning as standalone

HA backup FortiGate managing FortiSwitch

NEW QUESTION 41
Which two statements about DHCP snooping enabled on a FortiSwitch VLAN are true? (Choose two.)

Enabling DHCP snooping on a FortiSwitch VLAN ensures requests and replies are seen by all DHCP servers.

switch-controller-dhcp-snooping-verify-mac verifies the destination MAC address to protect against DHCP exhaustion attacks.

By default, all FortiSwitch ports are set to forward client DHCP requests to untrusted ports.

Settings related to DHCP option 82 are only configurable through the CLI

NEW QUESTION 42
Which two types of Layer 3 interfaces can participate in dynamic routing on FortiSwitch? (Choose two.)

Detected management interfaces

Loopback interfaces

Switch virtual interfaces

Physical interfaces

NSE6_FSW-7.2 Braindumps PDF, Fortinet NSE6_FSW-7.2 Exam Cram [Q21-Q45]

Be the first to reply

Leave a Reply Cancel reply