Which three methods are used by the collector agent for AD polling? (Choose three.)

The correct answer is A. WinSecLog B. NetAPI E. WMI. The FSSO (Fortinet Single Sign-On) Collector Agent uses three methods to poll Active Directory domain controllers for user logon events: (1) WinSecLog-reads Windows Security Event Logs directly from the DC; (2) NetAPI-uses the Windows Net API to query active sessions on the DC…

Submitted by brentm· Apr 18, 2026Firewall policies and authentication

Question

Options

AWinSecLog
BNetAPI
CFortiGate polling
DFSSO REST API
EWMI

How the community answered

(57 responses)

A
91% (52)
C
4% (2)
D
5% (3)

Explanation

The FSSO (Fortinet Single Sign-On) Collector Agent uses three methods to poll Active Directory domain controllers for user logon events: (1) WinSecLog-reads Windows Security Event Logs directly from the DC; (2) NetAPI-uses the Windows Net API to query active sessions on the DC; (3) WMI (Windows Management Instrumentation)-queries the DC via WMI for logon event data. 'FortiGate polling' (C) refers to agentless FSSO where the FortiGate itself polls DCs directly, bypassing the collector agent. 'FSSO REST API' (D) is not a traditional AD polling method used by the collector agent.

Topics

#FSSO#Active Directory polling#User authentication#Collector agent

Community Discussion

No community discussion yet for this question.

Full FCP_FGT_AD-7.6 Practice