nerdexam
Fortinet

NSE4 · Question #560

An administrator has enabled the DHCP Server on the port1 interface and configured the following based on the exhibit. Which statement is correct based on this configuration?

The correct answer is D. The IP address 10.0.1.254 is reserves for the device with the MAC address 00:0c:29:29:38:da. Based on the DHCP server configuration, the IP address 10.0.1.254 is reserved for the device identified by the specific MAC address 00:0c:29:29:38:da.

Submitted by ngozi_ng· Apr 18, 2026FortiGate Deployment and System Configuration

Question

An administrator has enabled the DHCP Server on the port1 interface and configured the following based on the exhibit. Which statement is correct based on this configuration?

Exhibit

NSE4 question #560 exhibit

Options

  • AThe MAC address 00:0c:29:29:38:da belongs to the port1 interface.
  • BAccess to the network is blocked for the devices with the MAC address 00:0c:29:29:38:da and the IP
  • C00:0c:29:29:38:da is the virtual MAC address assigned to the secondary IP address (10.0.1.254) of the
  • DThe IP address 10.0.1.254 is reserves for the device with the MAC address 00:0c:29:29:38:da.

How the community answered

(41 responses)
  • A
    5% (2)
  • B
    12% (5)
  • C
    2% (1)
  • D
    80% (33)

Why each option

Based on the DHCP server configuration, the IP address 10.0.1.254 is reserved for the device identified by the specific MAC address 00:0c:29:29:38:da.

AThe MAC address 00:0c:29:29:38:da belongs to the port1 interface.

The MAC address 00:0c:29:29:38:da is used to identify a client device for a DHCP reservation or filtering, not the FortiGate's own port1 interface.

BAccess to the network is blocked for the devices with the MAC address 00:0c:29:29:38:da and the IP

A DHCP reservation guarantees a specific IP address to a device; it does not block network access for that device, which would require a separate firewall policy or MAC access list.

C00:0c:29:29:38:da is the virtual MAC address assigned to the secondary IP address (10.0.1.254) of the

The MAC address 00:0c:29:29:38:da is a client MAC address used for DHCP services, not a virtual MAC address assigned to a FortiGate interface or its secondary IP address.

DThe IP address 10.0.1.254 is reserves for the device with the MAC address 00:0c:29:29:38:da.Correct

In a DHCP server configuration, when an IP address is explicitly associated with a specific MAC address, it creates a DHCP reservation, ensuring that only the device with that MAC address will consistently receive the reserved IP address.

Concept tested: DHCP reservation

Source: https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/33644/dhcp-server

Topics

#DHCP Server#IP Reservation#Network Configuration

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full NSE4 Practice