NSE 5 – FortiSIEM 5.2 — Question 19

What is the best discovery scan option for a network environment where ping is disabled on all network devices?

Answer options

• A. Smart scan
• B. Range scan
• C. CMDB scan
• D. L2 scan

Correct answer: A

Explanation

The Smart scan is the best choice because it utilizes various protocols to discover devices without relying on ping, making it suitable for environments where ICMP requests are blocked. The Range scan, CMDB scan, and L2 scan may not function effectively under these conditions, as they might depend on ping or have limited capabilities in discovering devices that do not respond to network probes.