Use ACLs, Security Profiles, and VLAN Security Mechanisms NSE5-FORTISWITCH-ADMINISTRATOR Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   In a private VLAN, what is the role of a promiscuous port in traffic flow between a host port and the gateway?

   • AThe promiscuous port blocks all traffic from host ports
   • BThe promiscuous port forwards traffic between the host port and the gateway
   • CThe promiscuous port only forwards traffic between isolated ports
   • DThe promiscuous port only forwards traffic between community ports
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   An administrator needs to enforce a policy that blocks peer-to-peer (P2P) file sharing on the employee VLAN while allowing all other traffic. They plan to use a security profile on FortiSwitch. Which security profile type should they configure and apply?

   • AWeb filtering profile
   • BIPS profile
   • CApplication control profile
   • DAntivirus profile
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   A FortiSwitch administrator wants to permit traffic from a specific MAC address while denying all other traffic on a port. Which ACL criteria would be used to identify the permitted traffic?

   • ASource MAC address
   • BDestination IP address
   • CSource TCP port
   • DDestination MAC address
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   In a private VLAN, what is the role of a promiscuous port?

   • AIt can only communicate with the primary VLAN
   • BIt can only communicate with ports in the same community VLAN
   • CIt can communicate with all ports in the private VLAN, including isolated and community ports
   • DIt cannot communicate with any other port in the private VLAN
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A university wants to isolate student dorm rooms from each other on the same VLAN, but they need a shared printer to be accessible to all students. They decide to use private VLANs. Which port roles should be configured for the student ports and the printer port?

   • AStudent ports as promiscuous, printer port as isolated
   • BStudent ports as community, printer port as promiscuous
   • CStudent ports as community, printer port as isolated
   • DStudent ports as isolated, printer port as promiscuous
   Reveal Solution Discussion Select an answer first