nerdexam
Fortinet

FCP_FGT_AD-7.6 · Question #24

Which statement correctly describes NetAPI polling mode for the FSSO collector agent?

The correct answer is C. The NetSessionEnum function is used to track user logouts. NetAPI: polls temporary sessions created on the DC when a user logs in or logs out and calls the NetSessionEnum function on Windows. It’s faster than the WinSec and WMI methods; however, it can miss some login events if a DC is under heavy system load. This is because sessions…

Submitted by haruto_sh· Apr 18, 2026Firewall policies and authentication

Question

Which statement correctly describes NetAPI polling mode for the FSSO collector agent?

Options

  • AThe collector agent uses a Windows API to query DCs for user logins.
  • BNetAPI polling can increase bandwidth usage in large networks.
  • CThe NetSessionEnum function is used to track user logouts.
  • DThe collector agent must search Windows application event logs.

How the community answered

(59 responses)
  • A
    3% (2)
  • B
    8% (5)
  • C
    86% (51)
  • D
    2% (1)

Explanation

NetAPI: polls temporary sessions created on the DC when a user logs in or logs out and calls the NetSessionEnum function on Windows. It’s faster than the WinSec and WMI methods; however, it can miss some login events if a DC is under heavy system load. This is because sessions can be quickly created and purged from RAM, before the agent has a chance to poll and notify

Topics

#FSSO#Authentication#NetAPI Polling#User Logout Tracking

Community Discussion

No community discussion yet for this question.

Full FCP_FGT_AD-7.6 Practice