Fortinet nse6-fsw-7-2 practice test

Refer to the exhibits.



Traffic arriving on port2 on FortiSwitch is tagged with VLAN ID 10 and destined for
PC1 connected on port1. PC1 expects to receive traffic untagged from port1 on FortiSwitch.
Which two configurations can you perform on FortiSwitch to ensure PC1 receives untagged traffic on port1? (Choose two.)

• A. Add the MAC address of PC1 as a member of VLAN 10.
• B. Add VLAN ID 10 as a member of the untagged VLANs on port1
• C. Remove VLAN 10 from the allowed VLANs and add it to untagged VLANs on port1
• D. Enable Private VLAN on VLAN 10 and add VLAN 20 as an isolated VLAN.

What can an administrator do to maintain a Forti-Gate-compatible FortiSwitch configuration when changing the management mode from standalone to FortiLink?

• A. Use a migration tool based on Python script to convert the configuration.
• B. Enable the FortiLink setting on FortiSwitch before the authorization process.
• C. FortiGate automatically saves the existing FortiSwitch configuration during the FortiLink management process.
• D. Register FortiSwitch to FortiSwitch Cloud to save a copy before managing with FortiGate.

What are two reasons why time synchronization between FortiGate and its managed FortiSwitch is critical in switch management? (Choose two.)

• A. FortiSwitch does not retain its time after a reboot, which gets reset after each reboot.
• B. FortiSwitch will not be able to become an NTP server for downstream devices.
• C. FortiSwitch cannot complete the DTLS handshake used in the CAPWAP tunnel.
• D. FortiSwitch will not allow other FortiSwitch devices in the chain be discovered by FortiGate.

Which LLDP-MED Type-Length-Values does FortiSwitch collect from endpoints to track network devices and determine their characteristics?

• A. Network policy
• B. Power management
• C. Location
• D. Inventory management

Refer to the exhibit.

Two routes are not installed in the forwarding information base (FIB) as shown in the exhibit.
Which two statements about these two route entries are true? (Choose two.)

• A. These two routes have a higher administrative distance value available to the destination networks.
• B. These two routes will be used as load-balancing routes.
• C. These two routes will become primary, if the best routes are removed.
• D. These two routes are available in the hardware routing table.

What feature can network administrators use to segment network operations and the administration of managed FortiSwitch devices on FortiGate?

• A. FortiGate multi-tenancy
• B. Multi-chassis links aggregation trunk
• C. FortiGate clustering protocol
• D. FortiLink split interface

Which interfaces on FortiSwitch send out FortiLink discovery frames by default in order to detect a FortiGate with an enabled FortiLink interface?

• A. All ports have auto-discovery enabled by default
• B. No ports are enabled by default for auto-discovery. This must be configured under config switch interface.
• C. The ports with auto-discovery enabled by default are dependent upon the FortiSwitch model.
• D. The last four switch ports on FortiSwitch have auto-discovery by default.

Refer to the exhibits.


Port1 and port2 are the only ports configured with the same native VLAN 10.
What are two reasons that can trigger port1 to shut down? (Choose two.)

• A. port1 was shut down by loop guard protection.
• B. STP triggered a loop and applied loop guard protection on port1.
• C. An endpoint sent a BPDU on port1 that it received from another interface.
• D. Loop guard frame sourced from port1 was received on port1.

Which Ethernet frame can create Layer 2 flooding due to all bytes on the destination MAC address being set to all FF?

• A. The broadcast Ethernet frame
• B. The unicast Ethernet frame
• C. The multicast Ethernet frame
• D. The anycast Ethernet frame

Which is a requirement to enable SNMP v2c on a managed FortiSwitch?

• A. Create a SNMP user to use for authentication and encryption.
• B. Specify an SNMP host to send traps to.
• C. Enable an SNMP v3 to handle traps messages with SNMP hosts.
• D. Configure SNMP agent and communities.