FCP – FortiGate Administrator 7.6 — Question 26

Which statement correctly describes NetAPI polling mode for the FSSO collector agent?

Answer options

• A. The collector agent uses a Windows API to query DCs for user logins.
• B. NetAPI polling can increase bandwidth usage in large networks.
• C. The NetSessionEnum function is used to track user logouts.
• D. The collector agent must search Windows application event logs.

Correct answer: C

Explanation

Option C is correct because the NetSessionEnum function specifically tracks user logouts. Option A is incorrect as it describes user logins, not logouts. Option B is not relevant to the functionality of tracking logouts, and Option D misrepresents the role of the collector agent, which does not need to search application event logs for this purpose.