nerdexam
Fortinet

NSE4 · Question #548

What does the command diagnose debuf fsso-polling refresh-user do?

The correct answer is C. It displays status information and some statistics related with the polls done by FortiGate on each DC. The diagnose debug fsso-polling refresh-user command on a FortiGate displays current status information and statistics related to user polling from domain controllers in an FSSO agentless polling setup.

Submitted by stefanr· Apr 18, 2026Firewall and Authentication

Question

What does the command diagnose debuf fsso-polling refresh-user do?

Options

  • AIt refreshes user group information form any servers connected to the FortiGate using a collector
  • BIt refreshes all users learned through agentless polling.
  • CIt displays status information and some statistics related with the polls done by FortiGate on each DC.
  • DIt enables agentless polling mode real-time debug.

How the community answered

(25 responses)
  • A
    4% (1)
  • C
    92% (23)
  • D
    4% (1)

Why each option

The `diagnose debug fsso-polling refresh-user` command on a FortiGate displays current status information and statistics related to user polling from domain controllers in an FSSO agentless polling setup.

AIt refreshes user group information form any servers connected to the FortiGate using a collector

This command does not refresh user group information via a collector; it's related to agentless polling and displays status.

BIt refreshes all users learned through agentless polling.

This command displays statistics and status, it does not initiate a refresh of all learned users.

CIt displays status information and some statistics related with the polls done by FortiGate on each DC.Correct

This FortiGate diagnostic command provides a snapshot of the FortiGate's FortiGate Single Sign-On (FSSO) agentless polling status, showing information and statistics regarding user polling from configured Domain Controllers (DCs). It helps administrators monitor the health and effectiveness of the FSSO polling process by displaying details such as the last successful poll, poll count, and any associated errors.

DIt enables agentless polling mode real-time debug.

While part of the `diagnose debug` command set, `fsso-polling refresh-user` specifically focuses on displaying polling statistics, not enabling real-time debug for agentless polling.

Concept tested: FortiGate FSSO agentless polling diagnostics

Source: https://docs.fortinet.com/document/fortigate/7.4.0/fortios-cookbook/369796/troubleshooting-fsso

Topics

#FSSO#Agentless Polling#CLI#Diagnostics

Community Discussion

No community discussion yet for this question.

Full NSE4 Practice