NSE 6 – FortiSwitch 7.2 — Question 13

How does FortiGate handle configuration of flow tracking sampling if you export the settings to a managed FortiSwitch stack with sampling mode set to perimeter is true?

Answer options

• A. FortiGate configures FortiSwitch to perform ingress sampling on all switch interfaces.
• B. FortiGate configures FortiSwitch to perform ingress sampling on all switch interfaces, except ICL and ISL interfaces.
• C. FortiGate configures and enables flow sampling on FortiSwitch but does not change existing sampling settings of interfaces
• D. FortiGate configures and enables egress sampling on all management interfaces.

Correct answer: B

Explanation

The correct answer is B because FortiGate configures ingress sampling on all interfaces of the FortiSwitch stack, while specifically excluding the Inter-Chassis Link (ICL) and Inter-Switch Link (ISL) interfaces. The other options do not accurately reflect the behavior of FortiGate in this scenario, as they either include interfaces that are excluded or misrepresent the type of sampling configured.