During layer 2 polling, which two pieces of information are gathered by FortiNAC to identify a device? (Choose two answers)

FortiNAC's Layer 2 polling method involves querying network infrastructure devices, such as switches, for their MAC address tables (also known as CAM tables). This process is fundamental for network visibility and control. The information gathered directly from these tables includes the MAC address of the connected endpoint, the specific device and port where that MAC address was observed ("where it was learned"), and a timestamp indicating when it was last seen ("the time it was learned"). This data allows FortiNAC to build a real-time inventory of connected devices, their physical locations, and their connection status.

B. The MAC-to-IP correlation learned: This information is primarily obtained through Layer 3 polling, where FortiNAC queries routers for their ARP tables, not from Layer 2 MAC address table polling.

C. The system name learned: The system name (or hostname) is not present in a switch's MAC address table. FortiNAC discovers this information using other methods like DHCP monitoring, DNS lookups, or active profiling.

1. FortiNAC Administration Guide (Version 9.4): In the "Discovery Methods" section under "L2 Polling," the documentation states, "FortiNAC polls network devices for their MAC address tables. This information is used to determine what hosts are connected to the network, where they are connected (switch and port), and when they were last seen." This directly supports that "where it was learned" and "the time it was learned" are key pieces of information gathered. (Reference: FortiNAC Administration Guide 9.4, Page 234, "Discovery Methods > L2 Polling").

2. FortiNAC Architecture Guide (Version 9.4): The guide explains the different discovery methods. It clearly separates L2 polling (MAC tables for location) from L3 polling (ARP tables for IP addresses) and other methods like DHCP for hostnames. This distinction confirms that MAC-to-IP and system names are not gathered via the L2 polling process itself. (Reference: FortiNAC Architecture Guide 9.4, Page 15, "Discovery Methods").