Fortinet NSE6_FSW-7.2 Exam - Topic 5 Question 29 Discussion

Actual exam question for Fortinet's NSE6_FSW-7.2 exam

Question #: 29
Topic #: 5

[All NSE6_FSW-7.2 Questions]

How does FortiSwitch perform actions on ingress and egress traffic using the access control list (ACL)?

AOnly high-end FortiSwitch models support ACL.

BACL can be used only at the prelookup stage in the traffic processing pipeline.

CClassifiers enable matching traffic based only on the VLAN ID.

DFortiSwitch checks ACL policies only from top to bottom.

Show Suggested Answer

Suggested Answer: D

In FortiSwitch, Access Control Lists (ACLs) are used to enforce security rules on both ingress and egress traffic:

ACL Evaluation Order (D):

Operational Function: FortiSwitch processes ACL entries from top to bottom, similar to how firewall rules are processed. The first match in the ACL determines the action taken on the packet, whether to allow or deny it, making the order of rules critical.

Configuration Advice: Careful planning of the order of ACL rules is necessary to ensure that more specific rules precede more general ones to avoid unintentional access or blocks.

Reference: For a comprehensive guide on configuring ACLs in FortiSwitch, consult the FortiSwitch security settings documentation available on: Fortinet Product Documentation

by Arlyne at Apr 06, 2025, 12:08 PM

Limited Time Offer

25%

Off

Get Premium NSE6_FSW-7.2 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Anglea

2 months ago

Yeah, ACL policies are definitely checked top to bottom!

upvoted 0 times

...

Kati

2 months ago

Totally agree, ACL is crucial for traffic management!

upvoted 0 times

...

German

3 months ago

I think classifiers can match on more than just VLAN ID.

upvoted 0 times

...

Alison

3 months ago

Wait, can ACL really only be used at the prelookup stage?

upvoted 0 times

...

Tyra

3 months ago

I heard only the high-end models support ACL.

upvoted 0 times

...

Lavonne

3 months ago

I believe FortiSwitch checks ACL policies from top to bottom, but I wonder if there are exceptions to that rule.

upvoted 0 times

...

Thomasena

4 months ago

I feel like classifiers can match traffic based on more than just VLAN ID, but I can't quite remember the specifics.

upvoted 0 times

...

Aliza

4 months ago

I think I came across a similar question about ACL processing stages, but I can't recall if it was only at the prelookup stage or if there were other stages involved.

upvoted 0 times

...

Cecil

4 months ago

I remember studying that ACLs can be applied to both ingress and egress traffic, but I'm not sure if all models support it.

upvoted 0 times

...

Wilbert

4 months ago

I've worked with FortiSwitch before, so I think I have a good handle on this. The key is understanding how the ACL classifiers and policies are used to match and process traffic. I'll apply that knowledge to evaluate the options.

upvoted 0 times

...

Melissa

4 months ago

Okay, let's see here. I know ACLs are used for traffic filtering, so I'll focus on understanding how FortiSwitch applies them at different stages of the traffic processing pipeline. That should help me identify the correct answer.

upvoted 0 times

...

Aja

5 months ago

Hmm, I'm a little unsure about this one. The wording is a bit technical, and I'm not super familiar with how FortiSwitch handles ACLs. I'll need to think this through carefully.

upvoted 0 times

...

Phung

5 months ago

This question seems pretty straightforward. I'll start by carefully reading through the options and trying to eliminate any that are clearly incorrect.

upvoted 0 times

...