Discuss Forescout FSCP Exam Topic 3 Question 1

When using the "Assign to VLAN action," why might it be useful to have a policy to record the original VLAN?

Select one:

ASince CounterACT reads the startup config to find the original VLAN, network administrators making changes to switch running configs could overwrite this VLAN information

BSince CounterACT reads the running config to find the original VLAN, network administrators saving configuration changes to switches could overwrite this VLAN information

CSince CounterACT reads the running config to find the original VLAN, network administrators making changes to switch running configs could overwrite this VLAN information

DSince CounterACT reads the running config to find the original VLAN, any changes to switch running configs could overwrite this VLAN information

ESince CounterACT reads the startup config to find the original VLAN, network administrators saving configuration changes to switches could overwrite this VLAN information

Suggested Answer: D

According to theForescout Switch Plugin documentation, the correct answer is:'Since CounterACT reads the running config to find the original VLAN, any changes to switch running configs could overwrite this VLAN information'.

Why Recording Original VLAN is Important:

According to the documentation:

When CounterACT assigns an endpoint to a quarantine VLAN:

Reading Original VLAN- CounterACT reads the switch running configuration to determine the original VLAN

Temporary Change- The endpoint is moved to the quarantine VLAN

Restoration Issue- If network administrators save configuration changes to the running config, CounterACT's reference to the original VLAN may be overwritten

Solution- Recording the original VLAN in a policy ensures you have a backup reference

Why Option D is the Most Accurate:

Option D states the key issue clearly: 'any changes to switch running configs could overwrite this VLAN information.' This is the most comprehensive and accurate statement because it acknowledges that ANY changes (not just those by administrators specifically) could cause the issue.

Get Premium FSCP Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

30 comments · newest first

Brynn 6 months ago

A is good, but I still think C is the best choice for clarity.

Willodean 6 months ago

I lean towards A. Startup config is crucial for stability.

Micah 6 months ago

True, but D feels too vague. C is more specific about admin actions.

Sarah 6 months ago

But what about D? It’s broader and covers all changes, not just admin ones.

Darrin 7 months ago

I agree, C is clear. It highlights the risk of overwriting.

Bettina 7 months ago

I think option C makes the most sense. Changes to running configs can easily overwrite VLAN info.

Beatriz 7 months ago

B) is misleading, it’s about running config, not startup!

Graham 8 months ago

Wait, can changes really overwrite that info?

Corinne 8 months ago

C) is the correct answer. Gotta love those tricky network configuration questions!

Major 8 months ago

Haha, who even uses CounterACT these days? I bet the developers are still stuck in the 90s.

Mollie 8 months ago

A) Since CounterACT reads the startup config to find the original VLAN, network administrators making changes to switch running configs could overwrite this VLAN information. I'm not sure why this would be useful though.

Louvenia 8 months ago

D) Since CounterACT reads the running config to find the original VLAN, any changes to switch running configs could overwrite this VLAN information. This seems like the most comprehensive answer.

Paris 8 months ago

C) Since CounterACT reads the running config to find the original VLAN, network administrators making changes to switch running configs could overwrite this VLAN information.

Josefa 9 months ago

I practiced a question similar to this, and I think B is wrong because it mentions saving changes, which doesn't seem to fit the context of VLAN recording.

Barb 9 months ago

I feel like D could be correct since it covers any changes to the running config, but I need to double-check the specifics about how CounterACT reads the configs.

Jimmie 9 months ago

I'm not entirely sure, but I remember something about startup vs. running config. Maybe it's A since it talks about the startup config?

Lajuana 9 months ago

I think the answer might be C because it mentions changes to the running config, which seems relevant to how VLANs are managed.

Anjelica 9 months ago

This is a good question. I'll make sure to read it carefully and think through the options before selecting my answer.

Lauryn 9 months ago

Okay, I think I've got it. The key is understanding that changes to the running config could overwrite the original VLAN info that CounterACT is reading.

Joana 10 months ago

I think D) makes more sense, though.

Dan 10 months ago

Totally agree, changes can mess things up.

Elise 10 months ago

A) is correct, startup config is key!

Virgilio 10 months ago

I'm pretty confident in my understanding of this. The correct answer is C, since CounterACT reads the running config and network admins making changes to that could overwrite the VLAN info.

Alisha 11 months ago

Hmm, I'm a bit confused about the difference between the startup config and the running config. I'll need to review that before answering.

Alva 11 months ago

This seems like a tricky question. I'll need to think carefully about how CounterACT reads the VLAN information.

Tamar 5 months ago

↳ replying to Alva

Good point! We should double-check the definitions.

Rolland 5 months ago

↳ replying to Alva

What if it's D? Changes could affect everything.

Herminia 6 months ago

↳ replying to Alva

Yeah, but which option mentions that?

Buck 6 months ago

↳ replying to Alva

I think it's about the running config.

Mitzie 10 months ago

↳ replying to Alva

I believe it's option C.

Forescout FSCP Exam - Topic 3 Question 1 Discussion