NSE4 · Question #55
Which statement describes what the CLI command diagnose debug authd fsso list is used for?
The correct answer is B. Displays which users are currently logged on using FSSO. The diagnose debug authd fsso list command on a FortiGate is used to display the current list of users authenticated via FSSO, along with their associated IP addresses and group memberships.
Question
Which statement describes what the CLI command diagnose debug authd fsso list is used for?
Options
- AMonitors communications between the FSSO collector agent and FortiGate unit.
- BDisplays which users are currently logged on using FSSO.
- CDisplays a listing of all connected FSSO collector agents.
- DLists all DC Agents installed on all domain controllers.
How the community answered
(57 responses)- B95% (54)
- C2% (1)
- D4% (2)
Why each option
The `diagnose debug authd fsso list` command on a FortiGate is used to display the current list of users authenticated via FSSO, along with their associated IP addresses and group memberships.
This specific command is designed to list currently authenticated FSSO users, not to monitor the communication flows between the FSSO collector agent and the FortiGate unit.
This FortiGate CLI command provides a real-time snapshot of the FSSO user table, showing which users the FortiGate currently recognizes as logged on through FSSO, their source IP addresses, and their associated user groups.
The command displays authenticated users known to the FortiGate, not a listing of the FSSO collector agents themselves.
This command is executed on the FortiGate and shows information known by the FortiGate about users, it does not list DC Agents installed on domain controllers.
Concept tested: FortiGate FSSO diagnostic commands
Source: https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/526738/fortinet-single-sign-on-fsso
Topics
Community Discussion
No community discussion yet for this question.