Question 1

Refer to the exhibit.You configured Switched Port Analyzer (SPAN) to monitor traffic from a source port on FortiSwitch 1,but the monitoring device is connected to FortiSwitch 2. After port mirroring configuration ontiSwitch 1, the monitoring device is not receiving any mirrored traffic.What is the most likely reason the mirrored traffic is not reaching the monitoring device? (Chooseone answer)

Options :

A : SPAN does not support forwarding mirrored traffic across multiple switches.

B : SPAN traffic must be filtered with an access control list (ACL).

C : The SPAN session must be restarted after configuration.

D : The monitoring device must use a management IP in the same subnet.

Answer: A

Question 2

How is traffic routed on FortiSwitch?

Options :

A : Hardware-based routing on FortiSwitch is handled by the CPU.

B : FortiSwitch looks up the hardware routing table and then the forwarding information base (FIB).

C : ASIC hardware routing can only handle dynamic routing, if supported.

D : Layer 3 routing can be configured on FortiSwitch, while managed by FortiGate.

Answer: D

Question 3

How does FortiGate handle configuration of flow tracking sampling if you export the settings to amanaged FortiSwitch stack with sampling mode set to perimeter is true?

Options :

A : FortiGate configures FortiSwitch to perform ingress sampling on all switch interfaces.

B : FortiGate configures FortiSwitch to perform ingress sampling on all switch interfaces, except ICLand ISL interfaces.

C : FortiGate configures and enables flow sampling on FortiSwitch but does not change existingsampling settings of interfaces.

D : FortiGate configures and enables egress sampling on all management interfaces.

Answer: B

Question 4

Refer to the exhibits.Administrator has deployed two FortiSwitch devices, Core-1 and Core-2, as multichassis linkaggregation group (MCLAG) peers. These switches are connected to FortiGate for FortiLink and to anaccess switch (Access-1) using an inter-switch link (ISL). After configuration, the administrator noticesthat both Core-1 and Core-2 are claiming to be the root bridge in the Multiple Spanning Tree Protocol(MSTP) topology. What explains this behavior? (Choose one answer)

Options :

A : FortiGate participates in MSTP and causes both switches to assume the root bridge role.

B : The ISL was not configured correctly, leading to MSTP inconsistency.

C : Both switches share the same bridge ID because MCLAG treats them as one logical switch.

D : MCLAG automatically disables STP on all peer switches.

Answer: C

Question 5

Refer to the exhibit.Which two statements best describe what is displayed in the FortiLink debug output shown in theexhibit? (Choose two.)

Options :

A : FortiSwitch is sending FortiLink heartbeats to FortiGate.

B : FortiSwitch is discovered and authorized by FortiGate.

C : FortiSwitch is in a waiting state to join the stack group on FortiGate.

D : FortiSwitch is ready to push its new hostname to FortiGate.

Answer: A,B