NSE4 Question #301: Real Exam Question with Answer & Explanation

Question

A FortiGate interface is configured with the following commands: What statements about the configuration are correct? (Choose two.)

Options

• AIPv6 clients connected to port1 can use SLAAC to generate their IPv6 addresses.
• BFortiGate can provide DNS settings to IPv6 clients.
• CFortiGate can send IPv6 router advertisements (RAs.)
• DFortiGate can provide IPv6 addresses to DHCPv6 client.

Explanation

The FortiGate interface configuration enables IPv6 Router Advertisements (RAs) and stateless DHCPv6 on port1.

Common mistakes.

• B. While ipv6dhcp6-mode stateless allows the FortiGate to provide DNS settings via DHCPv6, the provided configuration snippet does not explicitly show DNS servers being configured to be advertised.
• D. The ipv6dhcp6-mode stateless setting indicates that the FortiGate provides configuration information but does not assign IPv6 addresses; address assignment is typically handled by SLAAC in this mode.

Concept tested. FortiGate IPv6 interface configuration (SLAAC, RAs, DHCPv6)

Reference. https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/469905/ipv6

No community discussion yet for this question.