NSE5_FSW_AD-7.6問題集、Fortinet実際の試験問題

質問 1

An administrator needs to deploy managed FortiSwitch devices in a remote location where multiple VLANs must be utilized to segment devices. No Layer 3 switch or router is present. The the only WAN connectivity is the router provided by the ISP connected to the public internet.
Which two items will the administrator need to use? (Choose two.)

A. A FortiSwitch interface connected to the ISP router configured with fortilink-13-mode enabled.

B. FortiSwitch devices that have the required internal hardware for this configuration.

C. FortiSwitch and FortiGate devices configured with VXLAN interfaces.

D. FortiSwitch and FortiGate devices configured with IPsec interfaces.

E. FortiSwitch devices configured with NAT disabled.

正解: A,E

解説: (PassTest メンバーにのみ表示されます)

質問 2

Refer to the exhibit.

Two routes in the routing monitor are marked as available but are not installed in the forwarding information base (FIB). Which statement correctly explains why the routes have this status? (Choose one answer)

A. They are excluded from the FIB because a more preferred route exists for the same destination.

B. They are not included in the FIB due to route-policy filtering.

C. They are installed in the FIB but cannot be offloaded to hardware.

D. They are unavailable due to invalid next-hop addresses.

正解: A

解説: (PassTest メンバーにのみ表示されます)

質問 3

Which statement about using MAC, IP, and protocol-based VLANs on FortiSwitch is true?

A. FortiSwitch uses only the Ethernet type to assign traffic to VLANs.

B. lt is a scalable and secure solution in comparison to other Layer 2 security measures.

C. It provides benefits that can be obtained when using 802.1X authentication.

D. Endpoints are required to use the same FortiSwitch port to remain members of the VLAN.

正解: C

解説: (PassTest メンバーにのみ表示されます)

質問 4

Which QoS mechanism maps packets with specific CoS or DSCP markings to an egress queue?

A. Rate limiting for egress traffic

B. Classification for ingress traffic

C. Marking for ingress traffic

D. Queuing for egress traffic

正解: B

解説: (PassTest メンバーにのみ表示されます)

質問 5

Which two statements about DHCP snooping enabled on a FortiSwitch VLAN are true? (Choose two.)

A. switch-controller-dhcp-snooping-verify-mac verifies the destination MAC address to protect against DHCP exhaustion attacks.

B. Settings related to DHCP option 82 are only configurable through the CLI

C. By default, all FortiSwitch ports are set to forward client DHCP requests to untrusted ports.

D. Enabling DHCP snooping on a FortiSwitch VLAN ensures requests and replies are seen by all DHCP servers.

正解: A,B

解説: (PassTest メンバーにのみ表示されます)

質問 6

Refer to the exhibits.

All three FortiSwitch-connected ports are configured in VLAN 10. FortiGate acts as the Dynamic Host Configuration Protocol (DHCP) server and is connected to a DHCP snooping trusted trunk port. PC1 and PC2 are connected to ports configured as untrusted for Dynamic ARP Inspection (DAI), and no static bindings are configured in the IP source guard (IPSG) database. PC2 is compromised and attempts to spoof the FortiGate IP address by sending forged Address Resolution Protocol (ARP) replies with its own MAC address. What will FortiSwitch do with the ARP packets from PC2? (Choose one answer)

A. Accept the ARP replies because the VLAN has DAI enabled and FortiGate is a trusted DHCP server.

B. Forward the ARP replies because there are no IPSG bindings blocking them.

C. Forward the ARP replies to all VLAN 10 ports because DAI is only active on trusted ports.

D. Drop the ARP replies because they fail DAI validation against the DHCP snooping database.

正解: D

解説: (PassTest メンバーにのみ表示されます)

質問 7

Refer to the exhibits.

Port1 and port2 are the only ports configured with the same native VLAN 10.
What are two reasons that can trigger port1 to shut down? (Choose two.)

A. port1 was shut down by loop guard protection.

B. Loop guard frame sourced from port 1 was received on port 1.

C. An endpoint sent a BPDU on port1 that it received from another interface.

D. STP triggered a loop and applied loop guard protection on port1.

正解: A,D

解説: (PassTest メンバーにのみ表示されます)

質問 8

Refer to the exhibit.

You configured Switched Port Analyzer (SPAN) to monitor traffic from a source port on FortiSwitch 1, but the monitoring device is connected to FortiSwitch 2. After port mirroring configuration on FortiSwitch 1, the monitoring device is not receiving any mirrored traffic.
What is the most likely reason the mirrored traffic is not reaching the monitoring device? (Choose one answer)

A. SPAN does not support forwarding mirrored traffic across multiple switches.

B. The monitoring device must use a management IP in the same subnet.

C. The SPAN session must be restarted after configuration.

D. SPAN traffic must be filtered with an access control list (ACL).

正解: A

解説: (PassTest メンバーにのみ表示されます)

質問 9

Which three are valid actions that a FortiSwitch access control list (ACL) can apply to matching traffic?
(Choose three answers)

A. Set outer VLAN tags

B. QoS

C. Assign the VLAN ID

D. Traffic processing

E. Quarantine devices

正解: A,B,D

解説: (PassTest メンバーにのみ表示されます)

Fortinet NSE 5 - FortiSwitch 7.6 Administrator - NSE5_FSW_AD-7.6 模擬練習