Exam NSE4_FGT-6.4 topic 1 question 97 discussion

Actual exam question from Fortinet's NSE4_FGT-6.4

Question #: 97
Topic #: 1

[All NSE4_FGT-6.4 Questions]

Which two statements are correct regarding FortiGate FSSO agentless polling mode? (Choose two.)

A. FortiGate uses the AD server as the collector agent
B. FortiGate uses the SMB protocol to read the event viewer logs from the DCs
C. FortiGate points the collector agent to use a remote LDAP server
D. ForiGate queries AD by using the LDAP to retrieve user group information

Show Suggested Answer

Suggested Answer: BD 🗳️

by phototrait at June 30, 2021, 7:55 p.m.

Comments

Submit Cancel

Helber

Highly Voted 4 years ago

B and D - Fortiget Infrastructure 6.4 - pages 267 and 281

upvoted 5 times

...

KemalM

Highly Voted 3 years, 10 months ago

Answer: B & D Fortigate Infrastructure 7.0 Study Guide P.272-273

upvoted 5 times

...

herlock_sholmes_2810

Most Recent 6 months ago

Selected Answer: BD

B. and D. Agenteless Polling Mode - Doesn't require an external DC agent or collector agent - - FortiGate collects the data directly - Event logging must be enabled on the DCs - More CPU and RAM required by FortiGate - Support for polling option WinSecLog only - - FortiGate uses the SMB protocol to read the event viewer logs - Fewer available features than collector agent-based polling mode - FortiGate doesn't poll workstation - - Workstation verification is not available in agentless polling mode Reference: FortiGate 7.4 Administration Study Guide, page 132

upvoted 1 times

...