最新的Fortinet NSE6_FSW-7.2免費考試真題

問題1

Refer to the exhibits

Traffic arriving on port2 on FortiSwitch is tagged with VLAN ID 10 and destined for PC1 connected on port1. PC1 expects to receive traffic untagged from port1 on FortiSwitch.
Which two configurations can you perform on FortiSwitch to ensure PC1 receives untagged traffic on port1? (Choose two.)

A. Remove VLAN 10 from the allowed VLANs and add it to untagged VLANs on port1.

B. Add the MAC address of PCI as a member of VLAN 10.

C. Add VLAN ID 10 as a member of the untagged VLANs on port1.

D. Enable Private VLAN on VLAN 10 and add VLAN 20 as an isolated VLAN.

正確答案: B,C

說明：（僅 Fast2test 成員可見）

問題2

How does FortiGate handle configuration of flow tracking sampling if you export the settings to a managed FortiSwitch stack with sampling mode set to perimeter is true?

A. FortiGate configures FortiSwitch to perform ingress sampling on all switch interfaces, except ICL and ISL interfaces.

B. FortiGate configures and enables flow sampling on FortiSwitch but does not change existing sampling settings of interfaces.

C. FortiGate configures and enables egress sampling on all management interfaces.

D. FortiGate configures FortiSwitch to perform ingress sampling on all switch interfaces.

正確答案: A

說明：（僅 Fast2test 成員可見）

問題3

What are two ways in which automatic MAC address quarantine works on FortiSwitch? (Choose two.)

A. FortiGate applies the quarantine-related configuration only on FortiGate.

B. FortiSwitch supports only by VLAN quarantine mode.

C. FortiAnalyzer with a threat detection services license is required.

D. MAC address quarantine can be enabled through the FortiGate CLI only.

正確答案: C,D

問題4

What are two reasons why time synchronization between FortiGate and its managed FortiSwitch is critical in switch management? (Choose two.)

A. FortiSwitch will not allow other FortiSwitch devices in the chain be discovered by FortiGate.

B. FortiSwitch cannot complete the DTLS handshake used in the CAPWAP tunnel.

C. FortiSwitch will not be able to become an NTP server for downstream devices.

D. FortiSwitch does not retain its time after a reboot, which gets reset after each reboot.

正確答案: B,D

說明：（僅 Fast2test 成員可見）

問題5

Which packet capture method allows FortiSwitch to capture traffic on trunks and management interfaces?

A. SPAN

B. TCP dump

C. sFlow

D. Sniffer profile

正確答案: D

說明：（僅 Fast2test 成員可見）

問題6

Which statement about 802.1X security profiles using MAC-based authentication mode is true?

A. FortiSwitch can grant each device a different access level based on the credentials provided

B. FortiSwitch allows connectivity to all hosts connected to a port, if one host is authenticated.

C. FortiSwitch must communicate with the RADIUS server to authenticate devices

D. FortiSwitch performs faster when using this security mode on the ports.

正確答案: A

說明：（僅 Fast2test 成員可見）

最新的Fortinet NSE 6 - FortiSwitch 7.2 - NSE6_FSW-7.2免費考試真題

聯系我們

站內鏈接

最新更新