Fortinet NSE6_FSW-7.2 Exam Practice Test Instant Access

Question 1

Which LLDP-MED Type-Length-Values does FortiSwitch collect from endpoints to track network devices and determine their characteristics?

ANetwork policy

BPower management

CLocation

DInventory management

Answer : D

While FortiSwitch can collect all the listed LLDP-MED TLVs (Network Policy, Power Management, Location, and Inventory Management), the primary focus for tracking and identifying network devices is on the Inventory Management TLV.

This TLV carries critical details such as:

Manufacturer

Model

Hardware/Firmware versions

Serial/Asset numbers

This information provides a granular understanding of the devices on your network.

Question 2

Which drop policy mode, if assigned to a congested port, will drop incoming packets until there is no congestion on the egress port?

ATail-drop mode

BWeighted round robin mode.

CRandom early detection mode

DStrict mode

Answer : A

Tail-drop mode is a congestion management technique used in network devices, including FortiSwitches, to handle congestion on network ports:

Tail-Drop Mode (A):

Behavior: When a queue reaches its maximum capacity on a congested port, tail-drop mode simply drops any incoming packets that arrive after the buffer is full. This continues until the congestion is alleviated and there is space in the queue to accommodate new packets.

Application: This is a straightforward approach used when the device's buffer allocated to the port becomes full due to sustained high traffic, preventing buffer overflow and maintaining system stability.

Reference: For more details on congestion management techniques and settings on FortiSwitch, you can refer to the configuration manuals available on: Fortinet Product Documentation

Question 3

Which two statements about 802.1X authentication on FortiSwitch ports are true? (Choose two.)

AAll hosts behind an authenticated port are allowed access after a successful authentica-tion.

BA security policy is used to apply 802.1 authentication on a port.

CA local user database must be used to authenticate devices using the 802.1X authentica-tion protocol.

DAll devices connecting to FortiSwitch must support 802.1X authentication.

Answer : A, D

All hosts behind an authenticated port are allowed access after a successful authentication (A): Once a device on a port successfully authenticates using 802.1X, all other devices connected behind that port also gain network access. This is typical in scenarios where a switch is behind an authenticated port and not each device individually authenticates.

All devices connecting to FortiSwitch must support 802.1X authentication (D): For a network secured with 802.1X, all devices attempting to connect through the FortiSwitch must support and participate in 802.1X authentication to gain access. This ensures that all devices on the network are authenticated before they are allowed to communicate on the network.

Question 4

Which two statements about managing a FortiSwitch stack on FortiGate are true? (Choose two.)

AA FortiLink interface must be enabled on FortiGate.

BThe switch controller feature must be enabled on FortiGate.

COnly a hardware-based FortiGate can manage a FortiSwitch stack.

DFortiSwitch must be operating in standalone mode before authorization.

Answer : A, B

A FortiLink interface must be enabled on FortiGate (A): To manage a FortiSwitch stack, a dedicated FortiLink interface on the FortiGate is required. This interface is used to manage the communication between FortiGate and the FortiSwitch stack, enabling centralized control and configuration of the switches directly from the FortiGate.

The switch controller feature must be enabled on FortiGate (B): Enabling the switch controller feature on FortiGate allows it to manage connected FortiSwitch units. This feature provides tools and interfaces on the FortiGate for overseeing FortiSwitch configurations, monitoring switch status, and managing network policies across the stack.

Question 5

Which statement about 802.1X security profiles using MAC-based authentication mode is true?

AFortiSwitch allows connectivity to all hosts connected to a port, if one host is authenticated.

BFortiSwitch can grant each device a different access level based on the credentials provided

CFortiSwitch performs faster when using this security mode on the ports.

DFortiSwitch must communicate with the RADIUS server to authenticate devices

Answer : B

Pag 232, FortiSwitch_7.2_Study_Guide-Online 'However, if you want to authenticate each device behind a port, and optionally, grant each device a different access level based on the credentials provided, then MAC-based is required.'

Question 6

What type of multimode transceiver can be used to split a 40G port?

AQSFP+ transceiver

BSFP transceiver

CQSFP transceiver

DSFP+ transceiver

Answer : A

QSFP+ transceiver (A): The QSFP+ (Quad Small Form-factor Pluggable Plus) transceiver is designed to handle 40G data rates and can be used to split a 40G port into multiple 10G connections. This type of transceiver supports such configurations, making it suitable for high-density applications where multiple 10G connections are derived from a single 40G port, thereby maximizing the utilization of the port and the fiber infrastructure.

Question 7

Which interfaces on FortiSwitch send out FortiLink discovery frames by default in order to detect a FortiGate with an enabled FortiLink interface?

AAll ports have auto-discovery enabled by default.

BNo ports are enabled by default for auto-discovery. This must be configured under config switch interface.

CThe ports with auto-discovery enabled by default are dependent upon the FortiSwitch model.

DThe last four switch ports on FortiSwitch have auto-discovery enabled by default.

Answer : A

Fortinet FortiLink Protocol: The FortiLink protocol is Fortinet's proprietary mechanism for managing FortiSwitch units from a FortiGate firewall. It simplifies configuration and security policy enforcement across the connected network devices.

Auto-Discovery: FortiLink's auto-discovery feature means that by default, all ports on a FortiSwitch will actively send out discovery frames. This allows them to locate a FortiGate device that has a FortiLink interface enabled, streamlining the device management process.

No Configuration Needed: You don't have to manually configure individual ports for FortiLink discovery on FortiSwitch devices.

Reference

FortiSwitchOS FortiLink Guide (FortiSwitch Devices Managed by FortiOS 7.2): Refer to pages 13 and 14 for details on zero-touch management and FortiLink configuration. [https://fortinetweb.s3.amazonaws.com/docs.fortinet.com/v2/attachments/27f63c72-b083-11ec-9fd1-fa163e15d75b/FortiSwitchOS-7.2.0-FortiLink_Guide%E2%80%94FortiSwitch_Devices_Managed_by_FortiOS_7.2.pdf]

Fortinet NSE6_FSW-7.2 Fortinet NSE 6 - FortiSwitch 7.2 Exam Practice Test