nerdexam
Fortinet

NSE4 · Question #559

Which of the following statements about the FSSO collector agent timers is true?

The correct answer is D. The IP address change verify interval monitors the server IP address where the collector agent is. The FSSO collector agent's IP address change verify interval timer monitors the server IP address where the collector agent is installed, ensuring it detects any IP modifications.

Submitted by saadiq_pk· Apr 18, 2026Firewall and Authentication

Question

Which of the following statements about the FSSO collector agent timers is true?

Options

  • AThe dead entry timeout interval is used to age out entries with an unverified status.
  • BThe workstation verify interval is used to periodically check if a workstation is still a domain member.
  • CThe user group cache expiry is used to age out the monitored groups.
  • DThe IP address change verify interval monitors the server IP address where the collector agent is

How the community answered

(61 responses)
  • A
    2% (1)
  • B
    5% (3)
  • C
    3% (2)
  • D
    90% (55)

Why each option

The FSSO collector agent's IP address change verify interval timer monitors the server IP address where the collector agent is installed, ensuring it detects any IP modifications.

AThe dead entry timeout interval is used to age out entries with an unverified status.

The dead entry timeout interval is used to age out user entries where the user is no longer logged in or the session has expired, not specifically entries with an unverified status.

BThe workstation verify interval is used to periodically check if a workstation is still a domain member.

The workstation verify interval is used to periodically check if *users* are still logged in and active on a workstation, rather than verifying if the workstation itself is still a domain member.

CThe user group cache expiry is used to age out the monitored groups.

The user group cache expiry is used to age out the cached *user-to-group mappings* to ensure they are up-to-date, not to age out the monitored groups themselves.

DThe IP address change verify interval monitors the server IP address where the collector agent isCorrect

The IP address change verify interval timer in FSSO is designed to periodically check if the IP address of the Windows server hosting the FSSO collector agent has changed, ensuring proper communication and service continuity.

Concept tested: FSSO collector agent timers

Source: https://docs.fortinet.com/document/fortigate/7.2.0/administration-guide/469062/fsso-collector-agent

Topics

#FSSO#Collector Agent#Timers#Authentication

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full NSE4 Practice