An administrator manages a corporate environment where all users log into the corporate domain each...

The Passive Agent is the agent specifically associated in the FortiNAC-F 7.6 curriculum with domain login/logoff scripts . The Study Guide states that the Passive Agent is “deployed by a login/logoff script” and is designed to register and scan Windows endpoints joined to a domain when a domain user logs in .

The administrator places the Passive Agent executable in a user-accessible location, such as SYSVOL , configures the FortiNAC-F server information through administrative templates, and invokes the executable through the domain controller ' s login/logoff scripts. This allows FortiNAC-F to obtain endpoint information and track users without requiring interactive installation by the user. Passive Agent configurations can register the user and associated host, perform compliance scanning if configured, and track login/logout activity.

The Administration Guide reinforces this workflow by specifying GPO User Configuration > Windows Settings > Scripts (Logon/Logoff) and using the Passive Agent with -logon and -logoff parameters.

Therefore, the exam-specific answer is Passive Agent .

Study Guide Reference: Identification and Classification of Rogues → Passive Agent , pp. 125–126 .