NSE 4 – FortiGate 7.0 — Question 96

Which statement correctly describes NetAPI polling mode for the FSSO collector agent?

Answer options

• A. NetAPI polling can increase bandwidth usage in large networks.
• B. The NetSessionEnum function is used to track user logouts.
• C. The collector agent must search security event logs.
• D. The collector agent uses a Windows API to query DCs for user logins.

Correct answer: B

Explanation

The correct answer, B, is accurate because the NetSessionEnum function specifically tracks user logouts. Option A is incorrect as it discusses bandwidth usage, which is not the focus of the question. Option C is not correct since it does not pertain to logout tracking, and D is also incorrect because it refers to querying for logins rather than logouts.