NSE 5 - FortiSwitch 7.6 Administrator Exam Materials - Question #60 Discussion
Which statement about 802.1X security profiles using MAC-based authentication mode is true?
176 Certification Products • 3430 Comments • 2482 Questions
Which statement about 802.1X security profiles using MAC-based authentication mode is true?
Which three are valid actions that a FortiSwitch access control list (ACL) can apply to matching traffic?
Refer to the exhibits. Three FortiSwitch devices in standalone mode are interconnected. The CLI command diagnose stp instance list is executed on Core-2. Based on the output shown in the exhibit, what can you conclude about Core-2?
You are designing a FortiSwitch backbone where every FortiSwitch device must connect to every other FortiSwitch for maximum redundancy. To maintain connectivity while preventing loops, which protocol or feature must you configure on the switches?
Refer to the exhibit. Port24 is the only uplink port connected to the network where you need access to FortiSwitch management services. However, FortiSwitch is not accessible on its management interface with IP address 10.0.13.3. Based on the configuration shown in the exhi...
Refer to the exhibit. After reviewing the CLI command output, which two conclusions can you make about the Dynamic Host Configuration Protocol (DHCP) snooping configuration?
Which two are required to enable central management on FortiSASE?
Which LLDP-MED type-length-values (TLV) does FortiSwitch collect from endpoints to track network devices and determine their characteristics?
You are deploying a new FortiSwitch device in a branch office and you want it to be automatically detected and managed by FortiGate. Which FortiSwitch feature enables automatic detection during deployment?
You are designing a multi-tenant network using FortiSwitch devices in standalone mode. Security is a priority and each tenant’s servers must be completely isolated from one another, and from all other servers in the network, to prevent lateral communication. However, all servers...
What happens when a routed VLAN interface (RVI) is configured on a FortiSwitch port or trunk?
You need to deploy routing on a standalone FortiSwitch and want to maximize routing performance. Which type of routing is best for this deployment?
Refer to the exhibit. Two routes in the routing monitor are marked as available but are not installed in the forwarding information base (FIB). Which statement correctly explains why the routes have this status?
You need to mirror traffic from a source port on Switch A to a monitoring device on Switch C. For that purpose, you’re configuring Remote Switched Port Analyzer (RSPAN). Due to the nature of RSPAN, what is the best practice when setting it up?
Refer to the exhibit. PC1 connected to port1 has joined multicast group 225.1.2.3 on VLAN 10 with IGMP snooping enabled. What will happen if you disable IGMP snooping on FortiSwitch?
Your team is deploying a single FortiGate and a single FortiSwitch across 100 branch offices. The goal is to expedite deployment while avoiding manual configuration errors. Which method would allow you to achieve this goal most efficiently?
Refer to the exhibit. How does Spanning Tree Protocol (STP) see MCLAG and LAG if they are configured based on the physical view shown in the exhibit?
Which two requirements must be met before FortiGate can manage a FortiSwitch stack?
Refer to the exhibit. You have just authorized a new FortiSwitch on your FortiGate, and it appears online in the GUI. To verify that FortiLink connectivity is healthy, what should you check next?
FortiSwitch 802.1X port security configuration is shown. A user connects their laptop to the port and attempts to authenticate using 802.1X, but enters the wrong credentials multiple times. What will the result to the device be?