nerdexam
Fortinet

NSE4_FGT-7.0 · Question #12

Which two statements are correct regarding FortiGate FSSO agentless polling mode? (Choose two.)

The correct answer is C. FortiGate uses the SMB protocol to read the event viewer logs from the DCs. D. FortiGate queries AD by using the LDAP to retrieve user group information. FortiGate FSSO agentless polling mode involves the FortiGate directly querying Active Directory domain controllers to obtain user logon event logs and retrieve user group memberships.

System Configuration

Question

Which two statements are correct regarding FortiGate FSSO agentless polling mode? (Choose two.)

Options

  • AFortiGate points the collector agent to use a remote LDAP server.
  • BFortiGate uses the AD server as the collector agent.
  • CFortiGate uses the SMB protocol to read the event viewer logs from the DCs.
  • DFortiGate queries AD by using the LDAP to retrieve user group information.

How the community answered

(29 responses)
  • A
    3% (1)
  • B
    7% (2)
  • C
    90% (26)

Why each option

FortiGate FSSO agentless polling mode involves the FortiGate directly querying Active Directory domain controllers to obtain user logon event logs and retrieve user group memberships.

AFortiGate points the collector agent to use a remote LDAP server.

In FSSO agentless polling, the FortiGate itself performs the polling; it does not point a separate collector agent to use a remote LDAP server for this purpose.

BFortiGate uses the AD server as the collector agent.

The FortiGate acts as the client performing the polling, and the Active Directory (AD) server is the target it polls, not the collector agent itself.

CFortiGate uses the SMB protocol to read the event viewer logs from the DCs.Correct

In FSSO agentless polling mode, the FortiGate directly connects to domain controllers (DCs) using the Server Message Block (SMB) protocol to read the Windows Security Event Logs, specifically looking for user logon/logoff events.

DFortiGate queries AD by using the LDAP to retrieve user group information.Correct

Additionally, for user group information, the FortiGate queries Active Directory using the Lightweight Directory Access Protocol (LDAP) to retrieve details about which groups users belong to, enabling group-based policies.

Concept tested: FortiGate FSSO agentless polling mode mechanism

Source: https://docs.fortinet.com/document/fortigate/7.4.0/fortios-handbook/477202/agentless-fsso

Topics

#FSSO#agentless polling#Active Directory#LDAP#SMB

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full NSE4_FGT-7.0 Practice