NSE 4 – FortiGate 6.2 — Question 15

Which two statements describe WMI polling mode for the FSSO collector agent? (Choose two.)

Answer options

• A. WMI polling can increase bandwidth usage in large networks.
• B. The NetSessionEnum function is used to track user logoffs.
• C. The collector agent does not need to search any security event logs.
• D. The collector agent uses a Windows API to query DCs for user logins.

Correct answer: C, D

Explanation

The correct answers, C and D, indicate that the collector agent operates without needing to inspect security event logs and utilizes a Windows API for querying user logins. Options A and B are incorrect as they do not accurately describe WMI polling mode; A refers to bandwidth impact, while B pertains to logoff tracking, neither of which is relevant to WMI polling mode.