Fortinet nse6-fsw-7-2 practice test

Which QoS mechanism maps packets with specific CoS or DSCP markings to an egress queue?

• A. Queuing for egress traffic
• B. Classification for ingress traffic
• C. Rate limiting for egress traffic
• D. Marking for ingress traffic

Refer to the diagnostic output:

What makes the use of the sniffer command on the FortiSwitch CLI unreliable on _port_23?

• A. The types of packets captured is limited.
• B. Just the port egress payloads are printed on CLI.
• C. Only untagged VLAN traffic can be captured.
• D. The switch port might be used as a trunk member.

What are two reasons why time synchronization between FortiGate and its managed FortiSwitch is critical in switch management? (Choose two.)

• A. FortiSwitch does not retain its time after a reboot, which gets reset after each reboot.
• B. FortiSwitch will not be able to become an NTP server for downstream devices.
• C. FortiSwitch cannot complete the DTLS handshake used in the CAPWAP tunnel.
• D. FortiSwitch will not allow other FortiSwitch devices in the chain be discovered by FortiGate.

Refer to the diagnostic output:

Two entries in the exhibit show that the same MAC address has been used in two different VLANs.
Which MAC address is shown in the above output?

• A. It is a MAC address of FortiLink interface on FortiGate.
• B. It is a MAC address of a switch that accepts multiple VLANs.
• C. It is a MAC address of an upstream FortiSwitch.
• D. It is a MAC address of FortiGate in HA configuration.

Which Ethernet frame can create Layer 2 flooding due to all bytes on the destination MAC address being set to all FF?

• A. The broadcast Ethernet frame
• B. The unicast Ethernet frame
• C. The multicast Ethernet frame
• D. The anycast Ethernet frame

Refer to the exhibit.

Core-1 and Access-1 are managed and authorized by FortiGate-1, which uses port4 as the FortLink interface. After FortiGate authorizes and manages Core-2, port1 status becomes STP discarding.
Why is port1 in the discarding state?

• A. port1 on Core-2 is discarding only management traffic.
• B. Core-1 and Core-2 do not have MCLAG configuration.
• C. Access-1 is the root bridge and can only have one root port.
• D. Core-2 has the lowest bridge priority.

How does FortiGate handle configuration of flow tracking sampling if you export the settings to a managed FortiSwitch stack with sampling mode set to perimeter is true?

• A. FortiGate configures FortiSwitch to perform ingress sampling on all switch interfaces.
• B. FortiGate configures FortiSwitch to perform ingress sampling on all switch interfaces, except ICL and ISL interfaces.
• C. FortiGate configures and enables flow sampling on FortiSwitch but does not change existing sampling settings of interfaces
• D. FortiGate configures and enables egress sampling on all management interfaces.

Refer to the exhibits.



Traffic arriving on port2 on FortiSwitch is tagged with VLAN ID 10 and destined for
PC1 connected on port1. PC1 expects to receive traffic untagged from port1 on FortiSwitch.
Which two configurations can you perform on FortiSwitch to ensure PC1 receives untagged traffic on port1? (Choose two.)

• A. Add the MAC address of PC1 as a member of VLAN 10.
• B. Add VLAN ID 10 as a member of the untagged VLANs on port1
• C. Remove VLAN 10 from the allowed VLANs and add it to untagged VLANs on port1
• D. Enable Private VLAN on VLAN 10 and add VLAN 20 as an isolated VLAN.

Which packet capture method allows FortiSwitch to capture traffic on trunks and management interfaces?

• A. SPAN
• B. Sniffer profile
• C. sFlow
• D. TCP dump

Which two types of Layer 3 interfaces can participate in dynamic routing on FortiSwitch? (Choose two.)

• A. Detected management interfaces
• B. Loopback interfaces
• C. Switch virtual interfaces
• D. Physical interfaces