NSE4 · Question #463
What are the advantages of FSSO DC mode over polling mode?
The correct answer is C. DC agents are not required in the AD domain controllers. FSSO DC Agentless mode (often referred to as DC mode) is advantageous because it does not require FortiGate FSSO agents to be installed directly on the Active Directory domain controllers, simplifying deployment.
Question
What are the advantages of FSSO DC mode over polling mode?
Options
- ARedundancy in the collector agent.
- BAllows transparent authentication.
- CDC agents are not required in the AD domain controllers.
- DScalability
How the community answered
(45 responses)- A7% (3)
- B2% (1)
- C87% (39)
- D4% (2)
Why each option
FSSO DC Agentless mode (often referred to as DC mode) is advantageous because it does not require FortiGate FSSO agents to be installed directly on the Active Directory domain controllers, simplifying deployment.
Redundancy in the collector agent can be achieved in both DC mode and polling mode, so this is not a unique advantage of DC mode over polling mode.
Both FSSO modes (DC Agentless and Agent-based) aim to provide transparent authentication by mapping users to IP addresses; this is a general benefit of FSSO, not a specific advantage of DC mode over polling.
In FSSO DC Agentless mode, the FortiGate directly polls the Domain Controllers for logon events using WMI, eliminating the need to install specific Fortinet FSSO agents on each Domain Controller, which is a significant advantage over agent-based polling mode.
While FSSO offers scalability, the primary distinguishing advantage of DC Agentless mode over agent-based polling is the reduction in administrative overhead by not requiring agent installation on DCs, rather than a unique scaling benefit.
Concept tested: FortiGate FSSO DC Agentless mode advantages
Source: https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/139268/fsso-polling-mode
Topics
Community Discussion
No community discussion yet for this question.