Question 1

Which drop policy mode, if assigned to a congested port, will drop incoming packets until there is nocongestion on the egress port?

Options :

A : Tail-drop mode

B : Weighted round robin mode.

C : Random early detection mode

D : Strict mode

Answer: A

Question 2

Which three are valid actions that a FortiSwitch access control list (ACL) can apply to matching traffic?(Choose three answers)

Options :

A : Assign the VLAN ID

B : Quarantine devices

C : Traffic processing

D : Set outer VLAN tags

E : QoS

Answer: C,D,E

Question 3

Refer to the exhibits.Administrator has deployed two FortiSwitch devices, Core-1 and Core-2, as multichassis linkaggregation group (MCLAG) peers. These switches are connected to FortiGate for FortiLink and to anaccess switch (Access-1) using an inter-switch link (ISL). After configuration, the administrator noticesthat both Core-1 and Core-2 are claiming to be the root bridge in the Multiple Spanning Tree Protocol(MSTP) topology. What explains this behavior? (Choose one answer)

Options :

A : FortiGate participates in MSTP and causes both switches to assume the root bridge role.

B : The ISL was not configured correctly, leading to MSTP inconsistency.

C : Both switches share the same bridge ID because MCLAG treats them as one logical switch.

D : MCLAG automatically disables STP on all peer switches.

Answer: C

Question 4

Refer to the exhibit.Port24 is the only uplink port connected to the network where you need access to FortiSwitchmanagement services. However, FortiSwitch is not accessible on its management interface with IPaddress 10.0.13.3. Based on the configuration shown in the exhibit, which two actions should youtake to fix the issue and access FortiSwitch? (Choose two answers)

Options :

A : Change the management IP address to use the VLAN 100 subnet.

B : Change the native VLAN on port24 to VLAN 4094.

C : Remove VLAN 200 from the allowed VLANs on port24.

D : Add VLAN 4094 to the allowed VLANs on port24.

Answer: B,D

Question 5

How is traffic routed on FortiSwitch?

Options :

A : Hardware-based routing on FortiSwitch is handled by the CPU.

B : FortiSwitch looks up the hardware routing table and then the forwarding information base (FIB).

C : ASIC hardware routing can only handle dynamic routing, if supported.

D : Layer 3 routing can be configured on FortiSwitch, while managed by FortiGate.

Answer: D