Which of the following are true about the comments field of the CounterACT database? (Choose two)

The "Comments" field in the Forescout CounterACT database is a flexible text property for storing administrative notes about an endpoint. This field can be modified in two primary ways: manually by an administrator through the console interface, or automatically via a policy. The correct policy action to modify a host property on the appliance itself is "Run Script on CounterACT," which typically executes an fstool command. While the "Comments" property is a single database field, scripts can be configured to append new text to existing content. This allows for a running log or multiple distinct comments to be stored for a single endpoint over time.

B. This is incorrect because the Comments field can be edited manually by an administrator with appropriate permissions by right-clicking an endpoint in the console.

D. This is incorrect because policies can be configured to append new comments to the existing text in the field, functionally allowing multiple comments to be stored.

E. This is incorrect because the "Run Script on Windows" action executes on the endpoint itself, not the Forescout appliance where the host property database is located.

1. Forescout Administration Guide 8.2.2, Page 410, "Editing Host Details": This section explicitly states, "You can manually edit host details... In the Comments field, you can add comments about the host." This confirms that manual editing via a right-click action is a standard feature, supporting option C and invalidating option B.

2. Forescout Administration Guide 8.2.2, Page 581, "Run Script on CounterACT Appliance Action": The guide describes this action's purpose: "Use the Run Script on CounterACT Appliance action to run a custom script on the CounterACT Appliance that detects the endpoint." It provides an example use case: "...run an fstool command that updates a host property field." This confirms that "Run Script on CounterACT" is the correct policy action for this task, supporting option C and invalidating option E.

3. Forescout How-to-Guide: How to Create a Custom Property and Update It with a Policy, Version 1.1, Page 5, "Step 3: Create a Policy to Update the Custom Property": This document demonstrates using the fstool setproperty command within the "Run Script on CounterACT Appliance" action. The scripting logic often involves retrieving the existing property value and appending new information, such as fstool setproperty comments "$(fstool getproperty comments) | New comment from policy". This mechanism directly supports the concept of an endpoint having multiple comments (Option A) and refutes the idea of it being limited to a single entry (Option D).