NSE5_FSW_AD-7.6 試験問題を無料オンラインアクセス

(Full question statement start from here)
You enable Dynamic Host Configuration Protocol (DHCP) snooping on a VLAN and configure a FortiSwitch port astrustedfor DHCP snooping. What additional step is required to configure the port as trusted forDynamic ARP Inspection (DAI)? (Choose one answer)

• A.Manually set the port as trusted for DAI through the CLI.
• B.DAI implicitly trusts the port.
• C.Enable static MAC learning on the port.
• D.Enable IP Source Guard (IPSG) on the port.

Which LLDP-MED Type-Length-Values does FortiSwitch collect from endpoints to track network devices and determine their characteristics?

• A.Inventory management
• B.Location
• C.Power management
• D.Network policy

Refer to the exhibits.

Port1 and port2 are the only ports configured with the same native VLAN 10.
What are two reasons that can trigger port1 to shut down? (Choose two.)

• A.An endpoint sent a BPDU on port1 that it received from another interface.
• B.STP triggered a loop and applied loop guard protection on port1.
• C.Loop guard frame sourced from port 1 was received on port 1.
• D.port1 was shut down by loop guard protection.

Refer to the exhibits.

All three FortiSwitch-connected ports are configured in VLAN 10. FortiGate acts as the Dynamic Host Configuration Protocol (DHCP) server and is connected to a DHCP snooping trusted trunk port. PC1 and PC2 are connected to ports configured as untrusted for Dynamic ARP Inspection (DAI), and no static bindings are configured in the IP source guard (IPSG) database. PC2 is compromised and attempts to spoof the FortiGate IP address by sending forged Address Resolution Protocol (ARP) replies with its own MAC address. What will FortiSwitch do with the ARP packets from PC2? (Choose one answer)

• A.Accept the ARP replies because the VLAN has DAI enabled and FortiGate is a trusted DHCP server.
• B.Forward the ARP replies because there are no IPSG bindings blocking them.
• C.Forward the ARP replies to all VLAN 10 ports because DAI is only active on trusted ports.
• D.Drop the ARP replies because they fail DAI validation against the DHCP snooping database.

You are configuring FortiSwitch to perform layer 3 inter-VLAN routing while managed by FortiGate over FortiLink. On supported hardware models, FortiSwitch can offload routing decisions for better performance.
1How does FortiSwitch perform routing between VLANs? (Choose one answer)

• A.By disabling routing when managed by FortiGate.
• B.By using a hardware forwarding table (FIB) programmed into ASIC.
• C.By supporting only dynamic routing protocols in hardware.
• D.By relying entirely on the CPU in software.