Question 1

How does FortiGate handle configuration of flow tracking sampling if you export the settings to amanaged FortiSwitch stack with sampling mode set to perimeter is true?

Options :

A : FortiGate configures FortiSwitch to perform ingress sampling on all switch interfaces.

B : FortiGate configures FortiSwitch to perform ingress sampling on all switch interfaces, except ICLand ISL interfaces.

C : FortiGate configures and enables flow sampling on FortiSwitch but does not change existingsampling settings of interfaces.

D : FortiGate configures and enables egress sampling on all management interfaces.

Answer: B

Question 2

Refer to the exhibit.Which two statements best describe what is displayed in the FortiLink debug output shown in theexhibit? (Choose two.)

Options :

A : FortiSwitch is sending FortiLink heartbeats to FortiGate.

B : FortiSwitch is discovered and authorized by FortiGate.

C : FortiSwitch is in a waiting state to join the stack group on FortiGate.

D : FortiSwitch is ready to push its new hostname to FortiGate.

Answer: A,B

Question 3

You need to mirror traffic from a source port on Switch A to a monitoring device on Switch C. For thatpurpose, youre configuring Remote Switched Port Analyzer (RSPAN).1Due to the nature of RSPAN,what is the best practice when setting it up? (Choose one answer)

Options :

A : Use the same VLAN already configured for regular data traffic.

B : Use a dedicated VLAN assigned only to monitoring devices.

C : Use a dynamic VLAN that includes all switch ports.

D : Use the RSPAN VLAN as a native VLAN on all trunk ports.

Answer: B

Question 4

Refer to the exhibit.You configured Switched Port Analyzer (SPAN) to monitor traffic from a source port on FortiSwitch 1,but the monitoring device is connected to FortiSwitch 2. After port mirroring configuration ontiSwitch 1, the monitoring device is not receiving any mirrored traffic.What is the most likely reason the mirrored traffic is not reaching the monitoring device? (Chooseone answer)

Options :

A : SPAN does not support forwarding mirrored traffic across multiple switches.

B : SPAN traffic must be filtered with an access control list (ACL).

C : The SPAN session must be restarted after configuration.

D : The monitoring device must use a management IP in the same subnet.

Answer: A

Question 5

How is traffic routed on FortiSwitch?

Options :

A : Hardware-based routing on FortiSwitch is handled by the CPU.

B : FortiSwitch looks up the hardware routing table and then the forwarding information base (FIB).

C : ASIC hardware routing can only handle dynamic routing, if supported.

D : Layer 3 routing can be configured on FortiSwitch, while managed by FortiGate.

Answer: D