Deploy and Configure FortiSwitch in Multi-Tenancy Environment NSE5-FORTISWITCH-ADMINISTRATOR Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   In a multi-tenant FortiSwitch deployment, what is the most effective way to isolate traffic between two tenants that share the same physical switch?

   • AConfigure each tenant's ports with a different spanning-tree priority
   • BPlace each tenant's ports in a separate link aggregation group (LAG)
   • CAssign each tenant to a different VLAN and do not route between the VLANs
   • DUse the same VLAN but apply different access control lists (ACLs) to each tenant's ports
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A company is setting up a FortiSwitch for a multi-tenant building. Each tenant has a few computers and a printer. The administrator wants to ensure that each tenant's devices are isolated from other tenants, but devices within the same tenant can communicate. What is the best way to configure the FortiSwitch?

   • AEnable port isolation on all ports.
   • BAssign all ports for a tenant to the same VLAN, and use a different VLAN for each tenant.
   • CUse a single VLAN for all tenants and rely on the FortiGate for security.
   • DAssign each device to a unique VLAN.
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   In a multi-tenant FortiSwitch deployment, what is the primary role of a Virtual Domain (VDOM)?

   • ATo encrypt traffic between tenants on the same physical switch
   • BTo combine multiple physical switches into a single logical switch for easier management
   • CTo provide a separate routing table and administrative domain for each tenant
   • DTo provide a dedicated physical port for each tenant's management traffic
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A managed service provider (MSP) is deploying a FortiSwitch to support two separate customer tenants. Each tenant requires its own isolated Layer 2 broadcast domain and must not be able to communicate with the other tenant at Layer 2. The FortiSwitch is managed by a FortiGate that has two VDOMs configured, one per tenant. Which configuration step is essential to ensure that traffic from Tenant A is not forwarded to Tenant B?

   • AAssign each tenant's access ports to a different VLAN and configure the VLANs as separate broadcast domains.
   • BCreate a separate VDOM on the FortiSwitch for each tenant and assign all ports to both VDOMs.
   • CConfigure a single VLAN for both tenants and rely on the FortiGate's VDOMs to filter inter-tenant traffic.
   • DPlace all tenant ports in the same VLAN but enable port security to block unknown MAC addresses.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   An organization is deploying a FortiSwitch to support a multi-tenant environment. The FortiSwitch is managed by a FortiGate. The administrator wants to ensure that management traffic for the switch is separate from tenant traffic. What is the best practice for this?

   • ADisable all management protocols on the FortiSwitch and manage it only through the FortiGate.
   • BConfigure the FortiSwitch to be managed out-of-band using a dedicated management port.
   • CUse the default VLAN for both management and tenant traffic to simplify configuration.
   • DCreate a dedicated management VLAN and assign the FortiSwitch's management interface to it.
   Reveal Solution Discussion Select an answer first