Refer to the exhibit.

Which port group membership should you enable on FortiNAC to isolate rogue hosts?
Refer to the exhibit.
Which port group membership should you enable on FortiNAC to isolate rogue hosts?
On FortiNAC, to isolate rogue hosts, the 'Forced Registration' port group membership should be enabled. The Forced Registration port group moves unregistered rogue hosts to the Registration VLAN, effectively isolating them from the rest of the network for further actions, such as registration or additional security checks.
if a host with the state of Rogue connects to a port in the “Forced Registration port group”, FortiNAC will isolate that host by moving it into the Registration captive network.
FortiNAC captive networks are those networks used for the isolation of hosts, and the presentation of captive portals. There are seven types of captive networks: • Registration VLAN is used to isolate unregistered rogue devices. • Remediation VLAN is used to quarantine devices that failed endpoint compliance. • Disabled hosts are placed in dead end VLAN. • Authentication VLAN is used to isolate registered clients from the production network during user authentication. • Virtual private network (VPN) is used for clients who connect to the network through VPN services. • Access point management is used for clients that connect through devices managed by access point management. • Isolation VLAN uses the state of the client and redirects them to the appropriate isolation web pages. If you use this VLAN type, the configuration of the other VLAN types are optional.
• Registration VLAN is used to isolate unregistered rogue devices.
Answer is B. Registration VLAN is used to isolate unregistered rogue devices. Remediation VLAN is used to Quarantine Host or non compliance.
Answer is B. Registration VLAN is used to isolate unregistered rogue devices. Remediation VLAN is used to Quarantine Host or non compliance.