NSE 4 – FortiGate 7.2 — Question 34

Which statement correctly describes NetAPI polling mode for the FSSO collector agent?

Answer options

• A. The collector agent must search Windows application event logs.
• B. The NetSessionEnum function is used to track user logouts.
• C. NetAPI polling can increase bandwidth usage in large networks.
• D. The collector agent uses a Windows API to query DCs for user logins.

Correct answer: B

Explanation

The correct answer is B because the NetSessionEnum function specifically tracks user sessions and their logouts. Option A is incorrect as it refers to Windows application event logs, which are not essential for the NetAPI polling mode. Option C is misleading because while NetAPI polling can increase bandwidth usage, it does not define its primary function. Option D is incorrect since it describes querying for logins, not logouts.