Why would you use port mirroring to send traffic to an external analysis tool instead of using the built-in packet capture?

To increase the speed of the switch's forwarding engine

To analyze traffic with more advanced features like protocol decoders and long-term storage

To reduce the amount of traffic on the network

To allow the switch to block malicious traffic automatically

An administrator is analyzing a packet capture from a FortiSwitch and notices that a large number of frames are being dropped because the switch's buffer is full. What is the most likely cause of this issue?

The switch's MAC address table is full.

A VLAN mismatch is causing frames to be misdirected.

A faulty cable is causing CRC errors.

A broadcast storm is overwhelming the switch.

Which scenario is a typical use case for port mirroring with an external tool?

Automatically blocking a port that is sending excessive traffic

Replacing the need for SNMP monitoring of switch health

Creating a backup of the switch configuration

Monitoring traffic on a specific server port to troubleshoot an application performance issue

When using the FortiSwitch packet capture tool, how can you limit the capture to traffic on a specific VLAN?

By enabling 'capture vlan' mode in the global configuration

By capturing on the VLAN interface instead of a physical port

By using the 'diagnose sniffer packet any vlan ' command

By specifying the VLAN ID in the capture filter using the 'vlan' keyword

FortinetNSE 5 - FortiSwitch Administrator

Domain 4Objective 1

Use Packet Capturing Methods to Monitor and Troubleshoot Traffic Issues NSE5-FORTISWITCH-ADMINISTRATOR Practice Questions (Page 2)

Part of the Monitoring and Troubleshooting domain, which makes up ~15% of our current practice bank.

12questions here

3free pages

5concepts

Questions 6–10

6foundation · easy
Why would you use port mirroring to send traffic to an external analysis tool instead of using the built-in packet capture?
Select an answer first
7application · medium
An administrator is analyzing a packet capture from a FortiSwitch and notices that a large number of frames are being dropped because the switch's buffer is full. What is the most likely cause of this issue?
Select an answer first
8foundation · easy
Which FortiSwitch CLI command is used to start a packet capture on a specific interface?
Select an answer first
9foundation · easy
Which scenario is a typical use case for port mirroring with an external tool?
Select an answer first
10foundation · easy
When using the FortiSwitch packet capture tool, how can you limit the capture to traffic on a specific VLAN?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NSE5-FORTISWITCH-ADMINISTRATOR

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Fortinet. “NSE5-FORTISWITCH-ADMINISTRATOR” is a trademark of its owner, used for identification only.