Question 1

(Full question statement start from here)What is one key advantage of using a sniffer profile on FortiSwitch compared to using the sniffercommand? (Choose one answer)

Options :

A : It allows packet capture on all switch ports without limitations.

B : It eliminates the need to use access control lists (ACLs) or port mirroring for analysis.

C : It automatically filters irrelevant traffic types.

D : It automatically decrypts SSL/TLS traffic for full packet inspection.

Answer: A

Question 2

How is traffic routed on FortiSwitch?

Options :

A : Hardware-based routing on FortiSwitch is handled by the CPU.

B : FortiSwitch looks up the hardware routing table and then the forwarding information base (FIB).

C : ASIC hardware routing can only handle dynamic routing, if supported.

D : Layer 3 routing can be configured on FortiSwitch, while managed by FortiGate.

Answer: D

Question 3

Exhibit.The exhibit shows the current status of the ports on the managed FortiSwitch.Access-1.Why would FortiGate display a serial number in the Native VLAN column associated with the port23entry?

Options :

A : Port23 is a member of a trunk that uses the Access-1 FortiSwitch senal number as the name of thetrunk.

B : Port23 is configured as the dedicated management interface.

C : A standalone switch with the showm serial number is connected on por123.

D : Ports connect to adjacent FortiSwitch devices will show their.serial number as the na-tive VLAN

Answer: C

Question 4

How does FortiGate handle configuration of flow tracking sampling if you export the settings to amanaged FortiSwitch stack with sampling mode set to perimeter is true?

Options :

A : FortiGate configures FortiSwitch to perform ingress sampling on all switch interfaces.

B : FortiGate configures FortiSwitch to perform ingress sampling on all switch interfaces, except ICLand ISL interfaces.

C : FortiGate configures and enables flow sampling on FortiSwitch but does not change existingsampling settings of interfaces.

D : FortiGate configures and enables egress sampling on all management interfaces.

Answer: B

Question 5

Which drop policy mode, if assigned to a congested port, will drop incoming packets until there is nocongestion on the egress port?

Options :

A : Tail-drop mode

B : Weighted round robin mode.

C : Random early detection mode

D : Strict mode

Answer: A