Exam NSE6_FSW-7.2 topic 1 question 32 discussion

I vote B,D - it states all there is is the ISP router to the public internet - so there is NAT occuring outbound. You will need VXLAN and hardware-based so that the data vlan traffic is also able to be send via the VXLAN tunnel towards the FGT since there is no onsite customer router

Page 155 VXLAN can be used to create a layer 2 tunnel over a Layer 3 network. Allows NAT in layer3 networks due to frames being encapsulated in VXLAN protocol Data and management traffic with NAT supported available on devices with hardware-based VXLAN

A. A FortiSwitch interface connected to the ISP router configured with fortilink-l3-mode enabled. [CORRECT] "Enable fortilink-l3-mode on the FortiSwitch ports facing the remote FortiGate, if you are using the internal interface for FortiGate communication" B. FortiSwitch and FortiGate devices configured with VXLAN interfaces. [WRONG] VXLAN are used when there are routers and NAT applied in the communication between FGT and FSW. According to the question "No Layer 3 switch or router is present." so we can't use VXLAN. C. FortiSwitch devices configured with NAT disabled. [CORRECT] "You can also manage FortiSwitch devices over a Layer 3 network that is fully routable. This is, no NAT is performed along the path." Reference: FortiSwitch 7.2 Study Guide, page 154

a and c look good.

Let me Fix the answer. A, C Page 154

Guide Page 154, 155

Answer is B and D