Acceso bueno _1

What feature can network administrators use to segment network operations and the administration of managed FortiSwitch devices on FortiGate?. FortiGate multi-tenancy. Multi-chassis links aggregation trunk. FortiGate clustering protocol. FortiLink split interface.

Two routes are not installed in the forwarding information base (FIB) as shown in the exhibit. Which two statements about these two route entries are true? (Choose two.). These two routes have a higher administrative distance value available to the destination networks. These two routes will be used as load-balancing routes. These two routes will become primary, if the best routes are removed. These two routes are available in the hardware routing table.

Which packet capture method allows FortiSwitch to capture traffic on trunks and management interfaces?. SPAN. Sniffer profile. sFlow. TCP dump.

Which Ethernet frame can create Layer 2 flooding due to all bytes on the destination MAC address being set to all FF?. The broadcast Ethernet frame. The unicast Ethernet frame. The multicast Ethernet frame. The anycast Ethernet frame.

Which is a requirement to enable SNMP v2c on a managed FortiSwitch?. Create a SNMP user to use for authentication and encryption. Specify an SNMP host to send traps to. Enable an SNMP v3 to handle traps messages with SNMP hosts. Configure SNMP agent and communities.

What can an administrator do to maintain a Forti-Gate-compatible FortiSwitch configuration when changing the management mode from standalone to FortiLink?. Use a migration tool based on Python script to convert the configuration. Enable the FortiLink setting on FortiSwitch before the authorization process. FortiGate automatically saves the existing FortiSwitch configuration during the FortiLink management process. Register FortiSwitch to FortiSwitch Cloud to save a copy before managing with FortiGate.

Which two statements best describe what is displayed in the FortiLink debug output shown in the exhibit? (Choose two.). FortiSwitch is sending FortiLink heartbeats to FortiGate. FortiSwitch is discovered and authorized by FortiGate. FortiSwitch is in a waiting state to join the stack group on FortiGate. FortiSwitch is ready to push its new hostname to FortiGate.

Which two statements about VLAN assignments on FortiSwitch ports are true? (Choose two.). Configure a native VLAN on the FortiLink. Assign an IP address and subnet mask to FortiSwitch VLANs. Only assign one native VLAN on a port. Assign untagged VLANs using FortiGate CLI.

Which two rules used by MSTP are similar to rules used by other STP methods? (Choose two.). MSTP uses port role election, similar to rapid STP on the instances. MSTP uses alternate path and primary path, similar to regular STP. MSTP uses root bridge selection, similar to rapid STP. MSTP uses timers for transitioning the ports, similar to regular STP.

Which two conditions does FortiSwitch need to meet successfully configure the options shown in the exhibit above? (Choose two.) OJO. The FortiSwitch model is equipped with a maximum of 54 interfaces. FortiSwitch would need to be rebooted. The split port can be assigned to a native VLAN. The port full speed prior to the split was 100G QSFP+.

Which QoS mechanism maps packets with specific CoS or DSCP markings to an egress queue?. Queuing for egress traffic. Classification for ingress traffic. Rate limiting for egress traffic. Marking for ingress traffic.

Which statement about 802.1X security profiles using MAC-based authentication mode is true?. FortiSwitch allows connectivity to all hosts connected to a port, if one host is authenticated. FortiSwitch can grant each device a different access level based on the credentials provided. FortiSwitch performs faster when using this security mode on the ports. FortiSwitch must communicate with the RADIUS server to authenticate devices.

You are asked to ensure that managed FortiSwitch devices are reachable by other devices, such as SNMP and other management tools across your network. Which setting must you configure to ensure traffic from other devices in the network reaches FortiSwitch?. Select a specific default gateway provided to FortiSwitch as an upstream device. Change the FortiLink interface IP address and DHCP server address range. Recreate the FortiLink interface with a nonaggregate setting. Enable NAC settings to select the onboarding VLAN.

Which drop policy mode, if assigned to a congested port, will drop incoming packets until there is no congestion on the egress port?. Tail-drop mode. Weighted round robin mode. Random early detection mode. Strict mode.

How does FortiSwitch perform actions on ingress and egress traffic using the access control list (ACL)?. Only high-end FortiSwitch models support ACL. ACL can be used only at the prelookup stage in the traffic processing pipeline. Classifiers enable matching traffic based only on the VLAN ID. FortiSwitch checks ACL policies only from top to bottom.

An administrator needs to deploy managed FortiSwitch devices in a remote location where multiple VLANs must be utilized to segment devices. No Layer 3 switch or router is present. The only WAN connectivity is the router provided by the ISP connected to the public internet. Which two items will the administrator need to use? (Choose two.). A FortiSwitch interface connected to the ISP router configured with fortilink-13-mode enabled. FortiSwitch and FortiGate devices configured with VXLAN interfaces. FortiSwitch devices configured with NAT disabled. FortiSwitch devices that have the required internal hardware for this configuration. FortiSwitch and FortiGate devices configured with IPsec interfaces.