VendorsExamsEnterprise
Support
Request an ExamContact UsFAQ

Fortinet NSE 5 - FortiSwitch 7.6 Administrator Free Sample Questions

Description

Covers FortiSwitch VLANs, QoS, and stacking configuration, provisioning and multi-tenant deployment, port security and ACLs, and monitoring and troubleshooting FortiLink.

12 free sample questions135 in the full practice test

Try simulator

NSE5_FSW_AD-7.6 Sample Questions

  1. Question 1

    Advanced

    FortiSwitch Concepts · Configure the ports required for stack deployment

    A network architect is designing a high-availability campus network using FortiSwitch devices managed by a FortiGate. The design requires an MCLAG (Multi-Chassis Link Aggregation Group) pair at the distribution layer. During the configuration planning, the architect must ensure loop prevention and proper traffic handling if the Inter-Chassis Link (ICL) fails but the peer keepalive link remains active.

    Based on standard FortiSwitch MCLAG behavior, which action does the secondary MCLAG peer take in this split-brain scenario?

    Answer and explanation

    Correct answer: B

    In an MCLAG split-brain scenario where the ICL fails but the keepalive link is up, the secondary switch detects that the primary is still alive via the keepalive. To prevent Layer 2 loops and inconsistent forwarding, the secondary switch shuts down its MCLAG member ports (and typically other non-management ports, depending on configuration).

  2. Question 2

    Intermediate

    FortiSwitch Concepts · Use QoS and LLDP-MED on FortiSwitch

    A network administrator is configuring a FortiSwitch in standalone mode to support a VoIP deployment. The IP phones require specific LLDP-MED TLVs to function correctly, specifically for VLAN assignment and power management. Which CLI command context should the administrator access to configure the LLDP-MED network policy profiles?

    Answer and explanation

    Correct answer: C

    In FortiSwitch standalone mode, LLDP profiles are configured under config switch lldp profile. Within this profile, you define the LLDP-MED network policies and TLVs that will be advertised to connected devices.

  3. Question 3

    Advanced

    FortiSwitch Concepts · Configure VLANs using FortiSwitch

    An organization is implementing a Private VLAN (PVLAN) solution on their FortiSwitch infrastructure to isolate servers within the same subnet. The requirements are as follows:

    • Database servers must not communicate with each other.
    • Web servers must not communicate with each other.
    • All servers must communicate with the Gateway/Firewall.
    • A Backup server must be able to communicate with all Database and Web servers.

    Which PVLAN port type should be assigned to the Backup server to satisfy these requirements?

    Answer and explanation

    Correct answer: A

    A Promiscuous port in a Private VLAN can communicate with all other port types (Isolated, Community, and Promiscuous) within the same primary VLAN. Since the Backup server needs to talk to all other servers (which are likely on Isolated or Community ports), it must be on a Promiscuous port.

  4. Question 4

    Intermediate

    Monitoring and Troubleshooting · Troubleshoot FortiLink issues

    While troubleshooting a FortiLink connection between a FortiGate and a newly deployed FortiSwitch, the administrator notices the switch is not appearing in the Managed FortiSwitches list. The physical link is up, and LLDP shows the devices are neighbors.

    What is the most likely reason the FortiSwitch is not yet managed, assuming NTP and global settings are correct?

    Answer and explanation

    Correct answer: C

    By default, a FortiSwitch connected to a FortiLink interface must be authorized on the FortiGate before it becomes managed. It will appear in the 'Unmanaged' or 'Unauthorized' section until the administrator explicitly authorizes it, unless 'Auto-authorize' is enabled.

  5. Question 5

    Intermediate

    FortiSwitch Concepts · Configure STP to prevent network loops

    A FortiSwitch administrator needs to configure Multiple Spanning Tree Protocol (MSTP) to load balance traffic across redundant links. They want VLANs 10 and 20 to use one path, and VLANs 30 and 40 to use another.

    Which configuration step is critical to achieving this load balancing behavior?

    Answer and explanation

    Correct answer: A

    MSTP allows load balancing by mapping different VLANs to different MST instances (MSTIs). By configuring different root bridges or path costs for Instance 1 versus Instance 2, traffic for the associated VLANs will take different paths.

  6. Question 6

    Beginner

    Layer 2 Control and Security · Use filtering and antispoofing techniques on FortiSwitch

    A company requires strict security on their access layer switches. They want to prevent 'Man-in-the-Middle' attacks where a malicious user spoofs the gateway's IP address. The administrator plans to implement Dynamic ARP Inspection (DAI).

    Which prerequisite feature MUST be enabled and functioning correctly for DAI to validate ARP packets on untrusted ports?

    Answer and explanation

    Correct answer: C

    DAI relies on the DHCP Snooping binding database to validate ARP packets. It checks if the MAC-IP mapping in the ARP packet matches the binding entry created when the device requested an IP via DHCP. Without DHCP Snooping, DAI has no reference database for validation.

Register free for 6 more questions

Or unlock all 135 NSE5_FSW_AD-7.6 questions with explanations, timed mode and flashcards.

Related practice tests

All Fortinet practice exams