NSE 4 – FortiGate 6.4 — Question 62

An administrator does not want to report the logon events of service accounts to FortiGate.
What setting on the collector agent is required to achieve this?

Answer options

• A. Add the support of NTLM authentication
• B. Add user accounts to the FortiGate group filter
• C. Add user accounts to Active Directory (AD)
• D. Add user accounts to the Ignore User List

Correct answer: D

Explanation

The correct answer is D because adding user accounts to the Ignore User List explicitly prevents their logon events from being reported. Options A, B, and C do not address the requirement to ignore specific service accounts and instead focus on authentication or grouping, which does not achieve the desired outcome.