NSE 6 – FortiSwitch 7.2 — Question 21

Which statement about the quarantine VLAN on FortiSwitch is true?

Answer options

• A. Quarantine VLAN has no DHCP server.
• B. Users who fail 802.1X authentication can be placed on the quarantine VLAN.
• C. It is only used for quarantined devices if global setting is set to quarantine by VLAN.
• D. FortiSwitch can block devices without configuring quarantine VLAN to be part of the allowed VLANs.

Correct answer: B

Explanation

The correct answer is B because the quarantine VLAN is specifically designed to isolate users who fail 802.1X authentication. Option A is incorrect as the quarantine VLAN can have a DHCP server configured. Option C is misleading as it does not fully encompass the conditions under which the quarantine VLAN is used, and option D is not accurate since the FortiSwitch requires configuration to block devices effectively.