NSE 7 – OT Security 6.4 — Question 9
When device profiling rules are enabled, which devices connected on the network are evaluated by the device profiling rules?
Answer options
- A. Known trusted devices, each time they change location
- B. All connected devices, each time they connect
- C. Rogue devices, only when they connect for the first time
- D. Rogue devices, each time they connect
Correct answer: C
Explanation
The correct answer is C because device profiling rules specifically evaluate rogue devices only when they connect for the first time to assess their identity. Options A and B are incorrect as they refer to trusted devices or all devices, which are not the focus of device profiling rules. Option D is also incorrect since it implies ongoing evaluation of rogue devices rather than the initial assessment.