NSE4 · Question #202
If a FortiGate unit has a dmz interface IP address of 210.192.168.2 with a subnet mask of 255.255.255.0, what is a valid dmz DHCP addressing range?
The correct answer is B. 210.192.168.3 - 210.192.168.10. This question assesses the ability to determine a valid DHCP addressing range within a given subnet, considering the interface IP.
Question
If a FortiGate unit has a dmz interface IP address of 210.192.168.2 with a subnet mask of 255.255.255.0, what is a valid dmz DHCP addressing range?
Options
- A172.168.0.1 - 172.168.0.10
- B210.192.168.3 - 210.192.168.10
- C210.192.168.1 - 210.192.168.4
- DAll of the above.
How the community answered
(31 responses)- A13% (4)
- B77% (24)
- C3% (1)
- D6% (2)
Why each option
This question assesses the ability to determine a valid DHCP addressing range within a given subnet, considering the interface IP.
The IP range 172.168.0.1 - 172.168.0.10 belongs to a different IP network (172.168.0.0/24) and is therefore not valid for the 210.192.168.0/24 DMZ subnet.
Given the FortiGate's DMZ interface IP of 210.192.168.2 and a /24 subnet mask, a valid DHCP range must reside within the 210.192.168.0/24 network. The range 210.192.168.3 - 210.192.168.10 is valid because it excludes the network address (210.192.168.0), the broadcast address (210.192.168.255), and the FortiGate's interface IP (210.192.168.2), offering available IPs for clients.
The IP range 210.192.168.1 - 210.192.168.4 includes the network address 210.192.168.0 (which is not an assignable host IP) and the FortiGate interface IP 210.192.168.2, making it an invalid DHCP assignment range.
Not all options are correct, as A and C are invalid.
Concept tested: DHCP range configuration within a subnet
Source: https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/440536/dhcp-server
Topics
Community Discussion
No community discussion yet for this question.