ExamGecko
Question list
Search
Search

Question 44 - NSE5_FSM-6.3 discussion

Report
Export

Which discovery scan type is prone to miss a device, if the device is quiet and the entry foe that device is not present in the ARP table of adjacent devices?

A.
CMDB scan
Answers
A.
CMDB scan
B.
L2 scan
Answers
B.
L2 scan
C.
Range scan
Answers
C.
Range scan
D.
Smart scan
Answers
D.
Smart scan
Suggested answer: B

Explanation:

Discovery Scan Types: FortiSIEM uses various scan types to discover devices on a network.

Layer 2 (L2) Scan: An L2 scan discovers devices based on ARP tables and MAC address information from adjacent devices.

Limitation: If a device is quiet (not actively communicating) and its entry is not present in the ARP table of adjacent devices, the L2 scan may miss it.

Other Scan Types:

CMDB Scan: Based on the existing Configuration Management Database (CMDB) entries.

Range Scan: Scans a specified IP range for devices.

Smart Scan: Uses a combination of methods to discover devices.

Reference: FortiSIEM 6.3 User Guide, Device Discovery section, which explains the different types of discovery scans and their characteristics.

asked 18/09/2024
Babatunde Badiru
40 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first