I really want to advise all who is studying and taking the exam soon.This Q: Question #: 42, the ans is : C. NetAPI polling can increase bandwidth usage in large networks. Reason being, when NetAPI: polls sessions created on the DC, it only polls user logins and NOT logouts. And as such it does this every 9seconds if default timer is used. Hence, it will generate alot of bandwidth in large networks.

C P128

C is correct, It was mentioned also in the self-study for the test in LESSON 03: Fortinet Single Sign-On (FSSO)

The information about logout is completely wrong. It only gets login info from the DC. The right answer is C.

NetAPI: polls temporary sessions created on the DC when a user logs in or logs out and calls the NetSessionEnum function on Windows.

B is correct as NetAPI is capable to poll both login and logout sessions. The only drawback of this mentioned in fortinet documents is regarding the miss login events when DC is under heavy system load

The answer is C

NetAPI polling does not track user log out through NetSessionEnum function. This function is used to retrieve info about session established on a server but it does not specifically track user log outs

FSSO CANNOT get logout on an AD server. Answer is C.

Answer is B you can check FortiGate Infrastructure 7.2 Study Guide p.128 NetAPI: Polls temporary sessions created on the DC when users logs in or logs out and calls the NetSessionEnum function on Windows.

Ans B : The NetAPI polling use the NetSessionEnum Microsoft API from netapi32.dll to detect the users that have established session on the domain controller.

I think D stands as the correct answer because the question is asking what correctly describes the polling mode. In this case, the polling method scans a Microsoft or Windows DC using the windows API (netapi32.dll) for logged in users. https://community.fortinet.com/t5/FortiGate/Technical-Note-FSSO-NetAPI-polling-bandwidth-usage-calculator/ta-p/196417

C is the correct answer.

FortiGate Infrastructure 7.2 Study Guide p.128

Polling doesn't do use user logout only logins. The correct answer is C, increase network bandwidth.

B. The NetSessionEnum function is used to track user logouts. Reference and download study guide: https://ebin.pub/fortinet-fortigate-infrastructure-study-guide-for-fortios-72.html

NetAPI:Polls temporary sessions created on the DC when a user logs in or out and calls the NetSesssionEnum function on Windows. It is faster than WinSec and WMI but in turn might miss some login events if DC is under heavy load. This is because sessions can be quickly created and purged from RAM before agent has time to poll and notify FG.