When an ACL is applied to a FortiSwitch interface, what is the default action for traffic that does not match any of the explicitly configured rules?

The traffic is mirrored to a monitoring port

The traffic is denied by the implicit deny rule

The traffic is permitted by the implicit permit rule

The traffic is forwarded to the CPU for inspection

A company has a FortiSwitch and a FortiGate. They want to use security profiles on FortiSwitch to inspect traffic, but they are concerned about performance impact. What is the best practice to minimize performance impact while still providing security inspection?

Apply security profiles only to VLANs that require inspection, such as the guest VLAN.

Apply security profiles to all VLANs to ensure comprehensive security.

Disable security profiles on FortiSwitch and rely solely on FortiGate for inspection.

Use ACLs instead of security profiles to reduce performance impact.

FortinetNSE 5 - FortiSwitch Administrator

Domain 3Objective 3

Use ACLs, Security Profiles, and VLAN Security Mechanisms NSE5-FORTISWITCH-ADMINISTRATOR Practice Questions (Page 2)

Part of the Layer 2 Control and Security domain, which makes up ~18% of our current practice bank.

16questions here

4free pages

7concepts

Questions 6–10

6foundation · easy
When an ACL is applied to a FortiSwitch interface, what is the default action for traffic that does not match any of the explicitly configured rules?
Select an answer first
7foundation · easy
A FortiSwitch administrator wants to block access to malicious websites. Which type of security profile should be configured and applied?
Select an answer first
8foundation · easy
An administrator needs to prevent the spread of malware through file downloads on a FortiSwitch. Which security profile should be applied?
Select an answer first
9expert · hard
A company has a FortiSwitch and a FortiGate. They want to use security profiles on FortiSwitch to inspect traffic, but they are concerned about performance impact. What is the best practice to minimize performance impact while still providing security inspection?
Select an answer first
10foundation · easy
An administrator needs to allow a group of servers to communicate with each other but prevent them from communicating with other ports in the same private VLAN. Which port role should be assigned to the servers?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NSE5-FORTISWITCH-ADMINISTRATOR

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Fortinet. “NSE5-FORTISWITCH-ADMINISTRATOR” is a trademark of its owner, used for identification only.

Use ACLs, Security Profiles, and VLAN Security Mechanisms NSE5-FORTISWITCH-ADMINISTRATOR Practice Questions (Page 2)

Questions 6–10

When an ACL is applied to a FortiSwitch interface, what is the default action for traffic that does not match any of the explicitly configured rules?

A FortiSwitch administrator wants to block access to malicious websites. Which type of security profile should be configured and applied?

An administrator needs to prevent the spread of malware through file downloads on a FortiSwitch. Which security profile should be applied?

A company has a FortiSwitch and a FortiGate. They want to use security profiles on FortiSwitch to inspect traffic, but they are concerned about performance impact. What is the best practice to minimize performance impact while still providing security inspection?

An administrator needs to allow a group of servers to communicate with each other but prevent them from communicating with other ports in the same private VLAN. Which port role should be assigned to the servers?

Keep studying — Layer 2 Control and Security