nerdexam
Fortinet

FCSS_LED_AR-7.6 · Question #39

Your team is planning to configure a FortiGate wireless network that automatically quarantines devices using automation stitches. Which two configurations must be in place for a wireless client to…

The correct answer is A. Enable Device Detection at the interface level. D. Configure FortiGate as a member of a Security Fabric group. Device detection at the interface level allows the system to identify devices (including clients) that connect to the network, which is a prerequisite for any automated response such as quarantine when IOC events occur [Fortinet documentation on device detection and…

Advanced LAN Edge Architectures

Question

Your team is planning to configure a FortiGate wireless network that automatically quarantines devices using automation stitches. Which two configurations must be in place for a wireless client to be successfully quarantined upon detecting IOC events? (Choose two.)

Options

  • AEnable Device Detection at the interface level.
  • BFortiAnalyzer must have a valid threat detection services license.
  • CSSIDs must be configured in Bridge mode.
  • DConfigure FortiGate as a member of a Security Fabric group.

How the community answered

(32 responses)
  • A
    81% (26)
  • B
    13% (4)
  • C
    6% (2)

Explanation

Device detection at the interface level allows the system to identify devices (including clients) that connect to the network, which is a prerequisite for any automated response such as quarantine when IOC events occur [Fortinet documentation on device detection and interface-level sensing]. Being part of a Security Fabric group enables coordinated policy enforcement, centralized visibility, and automation stitches that can trigger quarantine actions across Fortinet devices when IOC-detected threats are present. This integration is what enables automated quarantine workflows to respond to security events in near real-time.

Topics

#automation stitches#IOC detection#Security Fabric#wireless quarantine

Community Discussion

No community discussion yet for this question.

Full FCSS_LED_AR-7.6 Practice