Fortinet
NSE5_FSW_AD-7.6
Fortinet NSE 5 - FortiSwitch 7.6 Administrator
Up to Date products, reliable and verified.
Questions and Answers in PDF Format.
For More Information – Visit link below:
Web: www.examkill.com/
Version product
Visit us at: https://examkill.com/nse5-fsw-ad-7-6
, Latest Version: 8.0
Question: 1
Which two statements about DHCP snooping enabled on a FortiSwitch VLAN are true? (Choose
two.)
A. Enabling DHCP snooping on a FortiSwitch VLAN ensures requests and replies are seen by all
DHCP servers.
B. switch-controller-dhcp-snooping-verify-mac verifies the destination MAC address to protect
against DHCP exhaustion attacks.
C. By default, all FortiSwitch ports are set to forward client DHCP requests to untrusted ports.
D. Settings related to DHCP option 82 are only configurable through the CLI
Answer: B, D
Explanation:
Switch-controller-dhcp-snooping-verify-mac verifies the destination MAC address to protect
against DHCP exhaustion attacks (B): This feature of DHCP snooping helps prevent DHCP
exhaustion attacks by ensuring that the destination MAC addresses in DHCP packets match the
MAC addresses learned by the switch. This check helps prevent attackers from overwhelming
the DHCP server with requests from spoofed MAC addresses.
Settings related to DHCP option 82 are only configurable through the CLI (D): DHCP Option 82 is
used for "agent information," and it's typically used in network environments where additional
information between DHCP clients and servers is necessary for policy and billing purposes.
Configuration of these settings in FortiSwitch is only available through the Command Line
Interface (CLI), not the Graphical User Interface (GUI).
Question: 2
Which statement about the quarantine VLAN on FortiSwitch is true?
A. Quarantine VLAN has no DHCP server
B. Users who fail 802.1X authentication can be placed on the quarantine VLAN.
C. It is only used for quarantined devices if global setting is set to quarantine by VLAN.
D. FortiSwitch can block devices without configuring quarantine VLAN to be part of the allowed
VLANs.
Answer: B
Explanation:
Visit us at: https://examkill.com/nse5-fsw-ad-7-6
NSE5_FSW_AD-7.6
Fortinet NSE 5 - FortiSwitch 7.6 Administrator
Up to Date products, reliable and verified.
Questions and Answers in PDF Format.
For More Information – Visit link below:
Web: www.examkill.com/
Version product
Visit us at: https://examkill.com/nse5-fsw-ad-7-6
, Latest Version: 8.0
Question: 1
Which two statements about DHCP snooping enabled on a FortiSwitch VLAN are true? (Choose
two.)
A. Enabling DHCP snooping on a FortiSwitch VLAN ensures requests and replies are seen by all
DHCP servers.
B. switch-controller-dhcp-snooping-verify-mac verifies the destination MAC address to protect
against DHCP exhaustion attacks.
C. By default, all FortiSwitch ports are set to forward client DHCP requests to untrusted ports.
D. Settings related to DHCP option 82 are only configurable through the CLI
Answer: B, D
Explanation:
Switch-controller-dhcp-snooping-verify-mac verifies the destination MAC address to protect
against DHCP exhaustion attacks (B): This feature of DHCP snooping helps prevent DHCP
exhaustion attacks by ensuring that the destination MAC addresses in DHCP packets match the
MAC addresses learned by the switch. This check helps prevent attackers from overwhelming
the DHCP server with requests from spoofed MAC addresses.
Settings related to DHCP option 82 are only configurable through the CLI (D): DHCP Option 82 is
used for "agent information," and it's typically used in network environments where additional
information between DHCP clients and servers is necessary for policy and billing purposes.
Configuration of these settings in FortiSwitch is only available through the Command Line
Interface (CLI), not the Graphical User Interface (GUI).
Question: 2
Which statement about the quarantine VLAN on FortiSwitch is true?
A. Quarantine VLAN has no DHCP server
B. Users who fail 802.1X authentication can be placed on the quarantine VLAN.
C. It is only used for quarantined devices if global setting is set to quarantine by VLAN.
D. FortiSwitch can block devices without configuring quarantine VLAN to be part of the allowed
VLANs.
Answer: B
Explanation:
Visit us at: https://examkill.com/nse5-fsw-ad-7-6
