NSE4 · Question #415
In a FSSO agentless polling mode solution, where must the collector agent be?
The correct answer is D. The FortiGate device polls the AD domain controllers. In an FSSO agentless polling mode solution, the FortiGate device itself acts as the collector agent and directly polls the Active Directory domain controllers for user login information.
Question
In a FSSO agentless polling mode solution, where must the collector agent be?
Options
- AIn any Windows server
- BIn any of the AD domain controllers
- CIn the master AD domain controller
- DThe FortiGate device polls the AD domain controllers
How the community answered
(42 responses)- B2% (1)
- C2% (1)
- D95% (40)
Why each option
In an FSSO agentless polling mode solution, the FortiGate device itself acts as the collector agent and directly polls the Active Directory domain controllers for user login information.
A separate Windows server is required for agent-based FSSO, but not when using agentless polling mode.
For agentless mode, the FortiGate polls the AD domain controllers itself, so no collector agent software needs to be installed on any DC.
An agent is not installed on the master AD domain controller in agentless polling mode, as the FortiGate performs the polling directly.
In FSSO agentless polling mode, the FortiGate device directly queries the Active Directory domain controllers for user login events, eliminating the need for a separate server to host a collector agent.
Concept tested: FSSO agentless polling mode architecture
Source: https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/708573/fssotm-overview
Topics
Community Discussion
No community discussion yet for this question.