NSE 4 – FortiGate Administrator 7.6 — Question 25

Which statement correctly describes NetAPI polling mode for the FSSO collector agent?

Answer options

• A. The collector agent must search Windows application event logs.
• B. The NetSessionEnum function is used to track user logouts.
• C. NetAPI polling can increase bandwidth usage in large networks.
• D. The collector agent uses a Windows API to query DCs for user logins.

Correct answer: B

Explanation

The correct answer is B because the NetSessionEnum function specifically tracks user logouts. Option A is incorrect as the collector agent does not need to search Windows application event logs for this function. Option C, while true about bandwidth, does not describe the function of the NetSessionEnum. Option D incorrectly states the purpose of the Windows API in this context, which is not related to user logouts.