Forescout FSCP Exam - Topic 3 Question 1 Discussion

Actual exam question for Forescout's FSCP exam

Question #: 1
Topic #: 3

When using the "Assign to VLAN action," why might it be useful to have a policy to record the original VLAN?

Select one:

ASince CounterACT reads the startup config to find the original VLAN, network administrators making changes to switch running configs could overwrite this VLAN information

BSince CounterACT reads the running config to find the original VLAN, network administrators saving configuration changes to switches could overwrite this VLAN information

CSince CounterACT reads the running config to find the original VLAN, network administrators making changes to switch running configs could overwrite this VLAN information

DSince CounterACT reads the running config to find the original VLAN, any changes to switch running configs could overwrite this VLAN information

ESince CounterACT reads the startup config to find the original VLAN, network administrators saving configuration changes to switches could overwrite this VLAN information

Show Suggested Answer

Suggested Answer: D

According to theForescout Switch Plugin documentation, the correct answer is:'Since CounterACT reads the running config to find the original VLAN, any changes to switch running configs could overwrite this VLAN information'.

Why Recording Original VLAN is Important:

According to the documentation:

When CounterACT assigns an endpoint to a quarantine VLAN:

Reading Original VLAN- CounterACT reads the switch running configuration to determine the original VLAN

Temporary Change- The endpoint is moved to the quarantine VLAN

Restoration Issue- If network administrators save configuration changes to the running config, CounterACT's reference to the original VLAN may be overwritten

Solution- Recording the original VLAN in a policy ensures you have a backup reference

Why Option D is the Most Accurate:

Option D states the key issue clearly: 'any changes to switch running configs could overwrite this VLAN information.' This is the most comprehensive and accurate statement because it acknowledges that ANY changes (not just those by administrators specifically) could cause the issue.

by Loren at Nov 22, 2025, 03:25 PM

Limited Time Offer

25%

Off

Get Premium FSCP Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Brynn

1 month ago

A is good, but I still think C is the best choice for clarity.

upvoted 0 times

...

Willodean

2 months ago

I lean towards A. Startup config is crucial for stability.

upvoted 0 times

...

Micah

2 months ago

True, but D feels too vague. C is more specific about admin actions.

upvoted 0 times

...

Sarah

2 months ago

But what about D? It’s broader and covers all changes, not just admin ones.

upvoted 0 times

...

Darrin

2 months ago

I agree, C is clear. It highlights the risk of overwriting.

upvoted 0 times

...

Bettina

2 months ago

I think option C makes the most sense. Changes to running configs can easily overwrite VLAN info.

upvoted 0 times

...

Beatriz

2 months ago

B) is misleading, it’s about running config, not startup!

upvoted 0 times

...

Graham

3 months ago

Wait, can changes really overwrite that info?

upvoted 0 times

...

Corinne

3 months ago

C) is the correct answer. Gotta love those tricky network configuration questions!

upvoted 0 times

...

Major

3 months ago

Haha, who even uses CounterACT these days? I bet the developers are still stuck in the 90s.

upvoted 0 times

...

Mollie

4 months ago

A) Since CounterACT reads the startup config to find the original VLAN, network administrators making changes to switch running configs could overwrite this VLAN information. I'm not sure why this would be useful though.

upvoted 0 times

...

Louvenia

4 months ago

D) Since CounterACT reads the running config to find the original VLAN, any changes to switch running configs could overwrite this VLAN information. This seems like the most comprehensive answer.

upvoted 0 times

...

Paris

4 months ago

C) Since CounterACT reads the running config to find the original VLAN, network administrators making changes to switch running configs could overwrite this VLAN information.

upvoted 0 times

...

Josefa

4 months ago

I practiced a question similar to this, and I think B is wrong because it mentions saving changes, which doesn't seem to fit the context of VLAN recording.

upvoted 0 times

...

Barb

4 months ago

I feel like D could be correct since it covers any changes to the running config, but I need to double-check the specifics about how CounterACT reads the configs.

upvoted 0 times

...

Jimmie

4 months ago

I'm not entirely sure, but I remember something about startup vs. running config. Maybe it's A since it talks about the startup config?

upvoted 0 times

...

Lajuana

5 months ago

I think the answer might be C because it mentions changes to the running config, which seems relevant to how VLANs are managed.

upvoted 0 times

...

Anjelica

5 months ago

This is a good question. I'll make sure to read it carefully and think through the options before selecting my answer.

upvoted 0 times

...

Lauryn

5 months ago

Okay, I think I've got it. The key is understanding that changes to the running config could overwrite the original VLAN info that CounterACT is reading.

upvoted 0 times

...

Joana

5 months ago

I think D) makes more sense, though.

upvoted 0 times

...

Dan

5 months ago

Totally agree, changes can mess things up.

upvoted 0 times

...

Elise

5 months ago

A) is correct, startup config is key!

upvoted 0 times

...

Virgilio

6 months ago

I'm pretty confident in my understanding of this. The correct answer is C, since CounterACT reads the running config and network admins making changes to that could overwrite the VLAN info.

upvoted 0 times

...