nerdexam
Fortinet

FCP_FGT_AD-7.4 · Question #87

Which statement correctly describes NetAPI polling mode for the FSSO collector agent?

The correct answer is A. The NetSessionEnum function is used to track user logouts. NetAPI: Polls temporary sessions created on the DC when a user logs on or logs off and calls the NetSessionEnum function on Windows. It’s faster than the WinSec and WMI methods; however, it can miss some logon events if a DC is under heavy system load. This is because sessions…

Authentication

Question

Which statement correctly describes NetAPI polling mode for the FSSO collector agent?

Options

  • AThe NetSessionEnum function is used to track user logouts.
  • BNetAPI polling can increase bandwidth usage in large networks.
  • CThe collector agent must search Windows application event logs.
  • DThe collector agent uses a Windows API to query DCs for user logins.

How the community answered

(24 responses)
  • A
    79% (19)
  • B
    4% (1)
  • C
    4% (1)
  • D
    13% (3)

Explanation

NetAPI: Polls temporary sessions created on the DC when a user logs on or logs off and calls the NetSessionEnum function on Windows. It’s faster than the WinSec and WMI methods; however, it can miss some logon events if a DC is under heavy system load. This is because sessions can be quickly created and purged form RAM, before the agent has a chance to poll and notify FG.

Topics

#FSSO#NetAPI polling#NetSessionEnum#collector agent

Community Discussion

No community discussion yet for this question.

Full FCP_FGT_AD-7.4 Practice