NSE4 Question #560: Real Exam Question with Answer & Explanation

Question

An administrator has enabled the DHCP Server on the port1 interface and configured the following based on the exhibit. Which statement is correct based on this configuration?

Options

• AThe MAC address 00:0c:29:29:38:da belongs to the port1 interface.
• BAccess to the network is blocked for the devices with the MAC address 00:0c:29:29:38:da and the IP
• C00:0c:29:29:38:da is the virtual MAC address assigned to the secondary IP address (10.0.1.254) of the
• DThe IP address 10.0.1.254 is reserves for the device with the MAC address 00:0c:29:29:38:da.

Explanation

Based on the DHCP server configuration, the IP address 10.0.1.254 is reserved for the device identified by the specific MAC address 00:0c:29:29:38:da.

Common mistakes.

• A. The MAC address 00:0c:29:29:38:da is used to identify a client device for a DHCP reservation or filtering, not the FortiGate's own port1 interface.
• B. A DHCP reservation guarantees a specific IP address to a device; it does not block network access for that device, which would require a separate firewall policy or MAC access list.
• C. The MAC address 00:0c:29:29:38:da is a client MAC address used for DHCP services, not a virtual MAC address assigned to a FortiGate interface or its secondary IP address.

Concept tested. DHCP reservation

Reference. https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/33644/dhcp-server

No community discussion yet for this question.