NSE5 FortiSwitch Administrator Practice Questions & Answers • ExamPrepare

32 questions in this view

Page 1 of 6

Question 1

Which statement about 802.1X security profiles using MAC-based authentication mode is true?

FortiSwitch allows connectivity to all hosts connected to a port, if one host is authenticated.
FortiSwitch must communicate with the RADIUS server to authenticate devices.
FortiSwitch can grant each device a different access level based on the credentials provided.
FortiSwitch can implement the use of an access point (AP) for this mode.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 2

An administrator must deploy managed FortiSwitch devices in a remote location where multiple VLANs must be used to segment devices. No layer 3 switch or router is present at the site, and the only WAN connectivity is an ISP-provided router connected to the public internet.

Which two components are required to enable VLAN segmentation across this remote site? (Choose two.)

FortiGate and FortiSwitch configured with VXLAN to tunnel VLANs over the WAN
A layer 3 router at the remote location to handle inter-VLAN routing
FortiSwitch and FortiGate devices configured with IPsec interfaces
FortiGate with a layer 3 interface to terminate the VXLAN overlay
A FortiSwitch model that supports VXLAN hardware acceleration

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 3

Refer to the exhibits.

You are reviewing a FortiSwitch configuration where port1 and port2 are connected to a switched network. Loop guard is enabled on port1.

The CLI output shows that the port1 status is triggered due to loop guard. Which two conditions could have caused this shutdown? (Choose two.)

Loop guard is triggered because the port detected excessive traffic.
Loop guard is triggered because port2 did not send any bridge protocol data units (BPDU).
A loop guard frame sent from port1 is received back on port1.
A loop guard frame sent from port1 is received on port2.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 4

What happens when a routed VLAN interface (RVI) is configured on a FortiSwitch port or trunk?

All VLANs on the port are terminated in a trunk by default.
VLAN 1 is automatically assigned for management.
The port becomes a layer 3 interface and assigned to VLAN 1.
The port becomes a layer 3 interface with VLAN 4095 assigned automatically.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 5

Refer to the exhibits.

Traffic arriving on port2 on FortiSwitch is tagged with VLAN ID 10 and destined for PC1 connected on port1. PC1 expects to receive traffic untagged from port1 on FortiSwitch.

Which two configurations can you perform on FortiSwitch to ensure PC1 receives untagged traffic on port1? (Choose two.)

Include VLAN 10 and VLAN 20 as allowed VLANs on port1.
Add VLAN ID 10 as a member of the untagged VLANs on port1.
Remove VLAN 10 from the allowed VLANs and add it to untagged VLANs on port1.
Add the MAC address of PC1 as a member of VLAN 10.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 6

You are designing a multi-tenant network using FortiSwitch devices in standalone mode. Security is a priority and each tenant’s servers must be completely isolated from one another, and from all other servers in the network, to prevent lateral communication. However, all servers must have access to the shared FortiGate firewall for internet access.

Which type of private VLAN (PVLAN) configuration should you apply to meet these security requirements?

Standalone VLAN
Isolated VLAN
Community VLAN
Primary VLAN

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.