Free Fortinet NSE 6 – FortiSwitch 7.2 Exam NSE6_FSW-7.2 Exam Practice Test

Which two statements about the FortiLink authorization process are true? (Choose two.)

• The administrator must manually pre-authorize FortiGate on FortiSwitch by adding the FortiGate serial number.
• FortiSwitch requires a reboot to complete the authorization process.
• A FortiLink frame is sent by FortiGate to FortiSwitch to complete the authorization.
• FortiLink authorization sets the FortiSwitch management mode to FortiLink.

Which statement about the use of the switch port analyzer (SPAN) packet capture method is true?

• Mirrored traffic can be sent across multiple switches.
• SPAN can be configured only on a standalone FortiSwitch.
• Traffic on the management interface can be mirrored and captured by the monitoring device.
• The monitoring device must be connected to the same switch where the traffic is being mirrored

What are two ways in which automatic MAC address quarantine works on FortiSwitch? (Choose two.)

• FortiSwitch supports only by VLAN quarantine mode.
• FortiGate applies the quarantine-related configuration only on FortiGate.
• FortiAnalyzer with a threat detection services license is required.
• MAC address quarantine can be enabled through the FortiGate CLI only.

Which QoS mechanism maps packets with specific CoS or DSCP markings to an egress queue?

• Queuing for egress traffic
• Classification for ingress traffic
• Rate limiting for egress traffic
• Marking for ingress traffic

What can an administrator do to maintain a FortiGate-compatible FortiSwitch configuration when changing the management mode from standalone to FortiLinK?

• Use a migration tool based on Python script to convert the configuration.
• Enable the FortiLink setting on FortiSwitch before the authorization process.
• FortiGate automatically saves the existing FortiSwitch configuration during the FortiLink management process.
• Register FortiSwitch to FortiSwitch Cloud to save a copy before managing with FortiGate.

Which interfaces on FortiSwitch send out FortiLink discovery frames by default in order to detect a FortiGate with an enabled FortiLink interface?

• All ports have auto-discovery enabled by default.
• No ports are enabled by default for auto-discovery. This must be configured under config switch interface.
• The ports with auto-discovery enabled by default are dependent upon the FortiSwitch model.
• The last four switch ports on FortiSwitch have auto-discovery enabled by default.

How does FortiSwitch perform actions on ingress and egress traffic using the access control list (ACL)?

• Only high-end FortiSwitch models support ACL.
• ACL can be used only at the prelookup stage in the traffic processing pipeline.
• Classifiers enable matching traffic based only on the VLAN ID.
• FortiSwitch checks ACL policies only from top to bottom.

How does FortiGate handle configuration of flow tracking sampling if you export the settings to a managed FortiSwitch stack with sampling mode set to perimeter is true?

• FortiGate configures FortiSwitch to perform ingress sampling on all switch interfaces.
• FortiGate configures FortiSwitch to perform ingress sampling on all switch interfaces, except ICL and ISL interfaces.
• FortiGate configures and enables flow sampling on FortiSwitch but does not change existing sampling settings of interfaces.
• FortiGate configures and enables egress sampling on all management interfaces.

Which two statements about managing a FortiSwitch stack on FortiGate are true? (Choose two.)

• A FortiLink interface must be enabled on FortiGate.
• The switch controller feature must be enabled on FortiGate.
• Only a hardware-based FortiGate can manage a FortiSwitch stack.
• FortiSwitch must be operating in standalone mode before authorization.

Which two types of Layer 3 interfaces can participate in dynamic routing on FortiSwitch? (Choose two.)

• Detected management interfaces
• Loopback interfaces
• Switch virtual interfaces
• Physical interfaces