NSE 6 – FortiSwitch 7.2 — Question 44

Which statement about 802.1X security profiles using MAC-based authentication mode is true?

Answer options

• A. FortiSwitch allows connectivity to all hosts connected to a port, if one host is authenticated.
• B. FortiSwitch can grant each device a different access level based on the credentials provided.
• C. FortiSwitch performs faster when using this security mode on the ports.
• D. FortiSwitch must communicate with the RADIUS server to authenticate devices.

Correct answer: B

Explanation

Option B is correct because FortiSwitch can provide varying access levels based on the authentication credentials of each device. Option A is incorrect as it suggests all devices gain access through one authenticated device, which is not how MAC-based authentication works. Option C is misleading because authentication speed is not guaranteed to improve with this mode. Option D is also incorrect since the primary function of MAC-based authentication does not always necessitate RADIUS communication for authentication.