Forescout Certified Professional - FSCP 模擬練習

A. Scripts run on CounterACT are copied to a script repository and run remotely from CounterACT

B. Scripts run on endpoints are copied to a temp directory and run locally on the endpoint

C. Scripts run on endpoints are copied to a temp directory and run remotely from CounterACT

D. Scripts run on endpoints are copied to a Linux script repository and run locally on the endpoint

E. Scripts run on CounterACT are copied to a temp directory and run locally on the endpoint

A. Use groups

B. Use sub rules

C. Use operating system property

D. Use function property

E. Use policy condition

A. NMAP scanning

B. NetFlow

C. Device profile library

D. Packet engine

E. Device classification engine

A. Since CounterACT reads the startup config to find the original VLAN, network administrators saving configuration changes to switches could overwrite this VLAN information

B. Since CounterACT reads the running config to find the original VLAN, network administrators making changes to switch running configs could overwrite this VLAN information

C. Since CounterACT reads the startup config to find the original VLAN, network administrators making changes to switch running configs could overwrite this VLAN information

D. Since CounterACT reads the running config to find the original VLAN, network administrators saving configuration changes to switches could overwrite this VLAN information

E. Since CounterACT reads the running config to find the original VLAN, any changes to switch running configs could overwrite this VLAN information

A. Password

B. Server Name

C. Administrator

D. Port

E. Address

A. Looking at Host logs is always the first step in the process

B. You would not. Host logs are the best choice for a range of endpoints

C. Because you can gather more pertinent information about a single host

D. Policy logs may help to pinpoint the issue for a specific host

E. Because Policy logs show details for a range of endpoints

A. Upgrade only the modules compatible with the version you are installing.

B. From the appliance CLI, fstool upgrade /tmp/counteract-v8.0.1.fsp

C. Upgrading an appliance is done through Options/Modules.

D. Upgrade the members first before upgrading the EM.

E. Consult the CounterACT Release Notes for the appropriate version

A. The condition does not have any sub-properties. The "any/all" refers to the multiple programs.

B. Although the condition has multiple sub-properties, the "any/all" refers to the programs and not the sub- properties.

C. Although the condition has multiple sub-properties, the "any/all" refers to the sub-properties and not the programs.

D. Although the condition has multiple sub-properties, when "ANY" is selected it evaluates the programs for any of the configured sub-properties.

E. Although the condition has sub-properties which could refer to a single program on multiple endpoints, the "any/all" refers to the program's properties.

A. Because they will never be manageable or have the required software and services

B. They have already been deployed and should immediately be subject to Assessment policies

C. Because they are not yet manageable and may not have all the required software and services installed

D. Because they will not be subject to the Acceptable Use Policy

E. Because they are special endpoints playing a specific role in the network