NSE 7 – LAN Edge 7.0 — Question 4

Which two statements about the MAC-based 802.1X security mode available on FortiSwitch are true? (Choose two.)

Answer options

• A. FortiSwitch authenticates a single device, and opens the port to other devices connected to the port.
• B. FortiSwitch authenticates each device connected to the port.
• C. It cannot be used in conjunction with MAC authentication bypass.
• D. FortiSwitch can grant different access levels to each device connected to the port.

Correct answer: B, D

Explanation

The correct answers are B and D because MAC-based 802.1X requires each device to be authenticated individually, allowing for distinct access levels based on the device's credentials. Option A is incorrect as it suggests that only one device is authenticated, which is not the case, and option C is wrong because MAC authentication bypass can indeed work with this mode.