nerdexam
Fortinet

NSE4 · Question #399

Which define device identification? (Choose two.)

The correct answer is B. Enabling a source device in a firewall policy enables device identification on the source D. FortiClient can be used as an agent based device identification technique. Device identification is enabled on an interface when a firewall policy uses a source device, and FortiClient acts as an agent-based method for identifying devices.

Submitted by amina.ke· Apr 18, 2026Firewall Policies and Authentication

Question

Which define device identification? (Choose two.)

Options

  • ADevice identification is enabled by default on all interfaces.
  • BEnabling a source device in a firewall policy enables device identification on the source
  • CYou cannot combine source user and source device in the same firewall policy.
  • DFortiClient can be used as an agent based device identification technique.
  • EOnly agentless device identification techniques are supported.

How the community answered

(27 responses)
  • B
    89% (24)
  • C
    4% (1)
  • E
    7% (2)

Why each option

Device identification is enabled on an interface when a firewall policy uses a source device, and FortiClient acts as an agent-based method for identifying devices.

ADevice identification is enabled by default on all interfaces.

Device identification is not enabled by default on all interfaces; it must be explicitly configured or implicitly enabled by being referenced in a firewall policy.

BEnabling a source device in a firewall policy enables device identification on the sourceCorrect

When a source device is configured in a firewall policy, FortiOS automatically enables device identification scanning on the incoming interface to identify connecting devices.

CYou cannot combine source user and source device in the same firewall policy.

FortiGate firewall policies can combine source user and source device for granular access control, allowing policies to apply based on both the user and the device.

DFortiClient can be used as an agent based device identification technique.Correct

FortiClient provides detailed endpoint information to the FortiGate, serving as an agent-based method for comprehensive device identification and posture assessment.

EOnly agentless device identification techniques are supported.

FortiGate supports both agentless (e.g., DHCP, HTTP user-agent) and agent-based (e.g., FortiClient) device identification techniques.

Concept tested: FortiGate device identification features

Source: https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/963231/device-identification

Topics

#Device Identification#FortiClient#Firewall Policy#Agent-based Identification

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full NSE4 Practice