nerdexam
Fortinet

NSE7_OTS-7.2 · Question #50

Which statement is correct about processing matched rogue devices by FortiNAC?

The correct answer is B. FortiNAC remembers the matching rule of the rogue device. When FortiNAC matches a rogue device to a profiling rule, it remembers that matching rule. FortiNAC revalidates the device against that rule each time it connects or at user-defined If the device no longer matches the rule on revalidation, FortiNAC can automatically disable the…

FortiNAC for OT

Question

Which statement is correct about processing matched rogue devices by FortiNAC?

Options

  • AFortiNAC cannot revalidate matched devices.
  • BFortiNAC remembers the matching rule of the rogue device.
  • CFortiNAC disables matching rule of previously-profiled rogue devices.
  • DFortiNAC matches the rogue device with only one device profiling rule.

How the community answered

(23 responses)
  • A
    4% (1)
  • B
    74% (17)
  • C
    9% (2)
  • D
    13% (3)

Explanation

When FortiNAC matches a rogue device to a profiling rule, it remembers that matching rule. FortiNAC revalidates the device against that rule each time it connects or at user-defined If the device no longer matches the rule on revalidation, FortiNAC can automatically disable the device as a safeguard. FortiNAC does not disable matching rules for previously profiled rogue devices, nor does it match a rogue device with only one profiling rule exclusively. Profiling rules can be multiple, but the device is associated with the rule it first matched.

Topics

#rogue device profiling#device matching rules#FortiNAC behavior#device remediation

Community Discussion

No community discussion yet for this question.

Full NSE7_OTS-7.2 Practice