In a private VLAN, what is the characteristic of an isolated port?

It can communicate with all other isolated ports

It can communicate with all ports in the private VLAN

It can communicate with ports in the same community VLAN

It can only communicate with promiscuous ports

An administrator needs to block a specific application (e.g., BitTorrent) on the employee VLAN, but allow all other applications. They plan to use a security profile on FortiSwitch. Which configuration should they use?

Create a web filtering profile that blocks BitTorrent and apply it to the employee VLAN.

Create an antivirus profile that blocks BitTorrent and apply it to the employee VLAN.

Create an application control profile that blocks BitTorrent and apply it to the employee VLAN.

Create an IPS profile that blocks BitTorrent and apply it to the employee VLAN.

What is the primary purpose of security profiles on FortiSwitch?

To manage the switch's power consumption

To configure the switch's management IP address

To provide routing between VLANs

To inspect traffic and enforce security policies such as antivirus and web filtering

An administrator needs to ensure that all traffic on the guest VLAN is scanned for malware before it reaches the internal network. They have a FortiSwitch with security profiles. What should they do?

Apply an antivirus security profile to the guest VLAN interface.

Apply an application control profile to the guest VLAN interface.

Apply a web filtering profile to the guest VLAN interface.

Apply an IPS profile to the guest VLAN interface.

A company wants to use FortiSwitch to inspect traffic for malware and block access to known malicious websites. They already have FortiGate in the network. What is the most appropriate way to achieve this using FortiSwitch security profiles?

Configure the security profiles on FortiGate and rely on it to inspect all traffic, since FortiSwitch cannot perform security inspection.

Configure a security profile on FortiSwitch that includes antivirus and web filtering, and apply it to the relevant VLAN.

Enable private VLANs on FortiSwitch to isolate traffic and prevent malware spread.

Use only ACLs on FortiSwitch to block known malicious IP addresses and domains.

FortinetNSE 5 - FortiSwitch Administrator

Domain 3Objective 3

Use ACLs, Security Profiles, and VLAN Security Mechanisms NSE5-FORTISWITCH-ADMINISTRATOR Practice Questions (Page 3)

Part of the Layer 2 Control and Security domain, which makes up ~18% of our current practice bank.

16questions here

4free pages

7concepts

Questions 11–15

11foundation · easy
In a private VLAN, what is the characteristic of an isolated port?
Select an answer first
12expert · hard
An administrator needs to block a specific application (e.g., BitTorrent) on the employee VLAN, but allow all other applications. They plan to use a security profile on FortiSwitch. Which configuration should they use?
Select an answer first
13foundation · easy
What is the primary purpose of security profiles on FortiSwitch?
Select an answer first
14application · medium
An administrator needs to ensure that all traffic on the guest VLAN is scanned for malware before it reaches the internal network. They have a FortiSwitch with security profiles. What should they do?
Select an answer first
15application · medium
A company wants to use FortiSwitch to inspect traffic for malware and block access to known malicious websites. They already have FortiGate in the network. What is the most appropriate way to achieve this using FortiSwitch security profiles?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NSE5-FORTISWITCH-ADMINISTRATOR

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Fortinet. “NSE5-FORTISWITCH-ADMINISTRATOR” is a trademark of its owner, used for identification only.