NSE 4 – FortiGate 7.0 — Question 66

An administrator does not want to report the logon events of service accounts to FortiGate.
What setting on the collector agent is required to achieve this?

Answer options

• A. Add user accounts to the Ignore User List.
• B. Add the support of NTLM authentication.
• C. Add user accounts to the FortiGate group filter.
• D. Add user accounts to Active Directory (AD).

Correct answer: A

Explanation

The correct answer is A because adding user accounts to the Ignore User List will prevent those accounts from being reported. Options B, C, and D do not address the requirement to exclude logon events specifically, making them ineffective for this purpose.