nerdexam
Fortinet

NSE5_FSM-6.3 · Question #15

Which discovery scan type is prone to miss a device, if the device is quiet and the entry foe that device is not present in the ARP table of adjacent devices?

The correct answer is B. L2 scan. Discovery Scan Types: FortiSIEM uses various scan types to discover devices on a network. Layer 2 (L2) Scan: An L2 scan discovers devices based on ARP tables and MAC address information from adjacent devices. Limitation: If a device is quiet (not actively communicating) and its…

Device and collector management

Question

Which discovery scan type is prone to miss a device, if the device is quiet and the entry foe that device is not present in the ARP table of adjacent devices?

Options

  • ACMDB scan
  • BL2 scan
  • CRange scan
  • DSmart scan

How the community answered

(26 responses)
  • A
    12% (3)
  • B
    77% (20)
  • C
    8% (2)
  • D
    4% (1)

Explanation

Discovery Scan Types: FortiSIEM uses various scan types to discover devices on a network. Layer 2 (L2) Scan: An L2 scan discovers devices based on ARP tables and MAC address information from adjacent devices. Limitation: If a device is quiet (not actively communicating) and its entry is not present in the ARP table of adjacent devices, the L2 scan may miss it. Other Scan Types: CMDB Scan: Based on the existing Configuration Management Database (CMDB) entries. Range Scan: Scans a specified IP range for devices. Smart Scan: Uses a combination of methods to discover devices.

Topics

#L2 scan#device discovery#ARP table#scan types

Community Discussion

No community discussion yet for this question.

Full NSE5_FSM-6.3 Practice