An administrator is configuring 802.1X on a FortiSwitch port that connects to a VoIP phone and a PC behind it. The PC supports 802.1X, but the phone does not. The administrator wants the phone to authenticate using its MAC address while the PC uses 802.1X. Which configuration should be used?

Enable 802.1X and configure MAB as the fallback method

Disable 802.1X and use static MAC entries for both devices

Configure the port as a multi-host 802.1X port

Enable MAC authentication only on the port

What is the primary purpose of MAC authentication on a FortiSwitch port?

To validate the MAC address of a device against an authentication server before granting network access

To prevent MAC address spoofing by encrypting frames

To assign a static MAC address to a port for traffic filtering

To automatically learn MAC addresses and populate the forwarding table

A company has a mix of devices on its network: some support 802.1X, some do not. The security policy requires that all devices authenticate before gaining network access. The administrator wants to use 802.1X for capable devices and MAC authentication for the rest, all managed by the same RADIUS server. Which configuration should be implemented?

Enable MAC authentication only on all ports

Configure 802.1X in guest VLAN mode

Enable 802.1X with MAB as fallback on all ports

Use static MAC entries for non-802.1X devices and 802.1X for the rest

FortinetNSE 5 - FortiSwitch Administrator

Domain 3Objective 1

Use Port Security Options on FortiSwitch NSE5-FORTISWITCH-ADMINISTRATOR Practice Questions (Page 1)

Part of the Layer 2 Control and Security domain, which makes up ~18% of our current practice bank.

9questions here

2free pages

2concepts

Questions 1–5

1application · medium
An administrator is configuring 802.1X on a FortiSwitch port that connects to a VoIP phone and a PC behind it. The PC supports 802.1X, but the phone does not. The administrator wants the phone to authenticate using its MAC address while the PC uses 802.1X. Which configuration should be used?
Select an answer first
2foundation · easy
What is the primary purpose of MAC authentication on a FortiSwitch port?
Select an answer first
3foundation · easy
Which protocol is used by FortiSwitch to perform 802.1X port-based authentication, allowing a client to be authenticated before the port is fully enabled?
Select an answer first
4application · medium
A company has a mix of devices on its network: some support 802.1X, some do not. The security policy requires that all devices authenticate before gaining network access. The administrator wants to use 802.1X for capable devices and MAC authentication for the rest, all managed by the same RADIUS server. Which configuration should be implemented?
Select an answer first
5application · medium
An administrator wants to ensure that only the first device that connects to a switch port is allowed, and any subsequent device that tries to use the same port is blocked. Which port security feature should be used?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NSE5-FORTISWITCH-ADMINISTRATOR

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Fortinet. “NSE5-FORTISWITCH-ADMINISTRATOR” is a trademark of its owner, used for identification only.

Use Port Security Options on FortiSwitch NSE5-FORTISWITCH-ADMINISTRATOR Practice Questions (Page 1)

Questions 1–5

An administrator is configuring 802.1X on a FortiSwitch port that connects to a VoIP phone and a PC behind it. The PC supports 802.1X, but the phone does not. The administrator wants the phone to authenticate using its MAC address while the PC uses 802.1X. Which configuration should be used?

What is the primary purpose of MAC authentication on a FortiSwitch port?

Which protocol is used by FortiSwitch to perform 802.1X port-based authentication, allowing a client to be authenticated before the port is fully enabled?

An administrator wants to ensure that only the first device that connects to a switch port is allowed, and any subsequent device that tries to use the same port is blocked. Which port security feature should be used?

Keep studying — Layer 2 Control and Security