Exam NSE7 topic 1 question 5 discussion

Actual exam question from Fortinet's NSE7

Question #: 5
Topic #: 1

A corporate network allows Internet Access to FSSO users only. The FSSO user student does not have Internet access after successfully logged into the
Windows AD network. The output of the "˜diagnose debug authd fsso list' command does not show student as an active FSSO user. Other FSSO users can access the Internet without problems. What should the administrator check? (Choose two.)

A. The user student must not be listed in the CA's ignore user list.
B. The user student must belong to one or more of the monitored user groups.
C. The student workstation's IP subnet must be listed in the CA's trusted list.
D. At least one of the student's user groups must be allowed by a FortiGate firewall policy.

Show Suggested Answer

Suggested Answer: AB 🗳️

by Jevza at Aug. 14, 2021, 12:52 a.m.

Comments

Submit Cancel

pereirarj

Highly Voted 2 years, 12 months ago

After a lot of research, A and B is actually correct. This question ins't about policies, but the user appearing in FSSO monitored users list. So if you look at the things that could prevent that, it's either a collector agent ignore list or the user group isn't monitored at all in the collector agent configuration.

upvoted 6 times