NSE 4 – FortiGate 6.4 — Question 21

Which statement correctly describes NetAPI polling mode for the FSSO collector agent?

Answer options

• A. NetAPI polling can increase bandwidth usage in large networks.
• B. The NetSessionEnum function is used to track user logouts.
• C. The collector agent uses a Windows API to query DCs for user logins.
• D. The collector agent must search security event logs.

Correct answer: B

Explanation

Option B is correct because the NetSessionEnum function specifically tracks user logouts. Option A is incorrect as it discusses bandwidth usage, which is not the focus of polling mode. Options C and D are also incorrect because they pertain to different functionalities of the collector agent that do not relate to the NetAPI polling mode.