Fortinet NSE4_FGT_AD-7.6 Exam - Topic 4 Question 5 Discussion

Actual exam question for Fortinet's NSE4_FGT_AD-7.6 exam

Question #: 5
Topic #: 4

[All NSE4_FGT_AD-7.6 Questions]

Which statement correctly describes NetAPI polling mode for the FSSO collector agent?

AThe collector agent uses a Windows API to query DCs for user logins.

BThe NetSessionEnum function is used to track user logouts.

CNetAPI polling can increase bandwidth usage in large networks.

DThe collector agent must search Windows application event logs.

Show Suggested Answer

Suggested Answer: B

NetAPI: Polls temporary sessions created on the DC when a user logs on or logs off and calls the NetSessionEnum function on Windows. It's faster than the WinSec and WMI methods; however, it can miss some logon events if a DC is under heavy system load. This is because sessions can be quickly created and purged form RAM, before the agent has a chance to poll and notify FG.

by Royal at Jan 25, 2026, 05:53 PM

Limited Time Offer

25%

Off

Get Premium NSE4_FGT_AD-7.6 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Sabra

5 days ago

I'm not entirely sure, but I remember something about bandwidth issues in large networks, so maybe C is correct?

upvoted 0 times

...

Estrella

10 days ago

I think option A sounds familiar because we discussed how the collector agent interacts with domain controllers.

upvoted 0 times

...

Burma

15 days ago

I feel pretty confident about this one. I remember learning that the NetAPI polling mode uses a Windows API to query DCs for user logins, so I'm going to go with option A.

upvoted 0 times

...

Remedios

20 days ago

I'm a bit confused by this question. The options seem to cover different aspects of the FSSO collector agent, so I'm not sure which one is the correct statement about the NetAPI polling mode specifically. I'll have to guess on this one.

upvoted 0 times

...

Mari

25 days ago

Okay, let me think this through. The question is asking about the NetAPI polling mode, so I should focus on the options related to that. I'm leaning towards B, since the NetSessionEnum function is used to track user logouts.

upvoted 0 times

...

Quiana

1 month ago

Hmm, I'm not totally sure about this one. I'll need to review the material on FSSO collector agent polling modes again before I can decide.

upvoted 0 times

...

Rosina

1 month ago

I think I know the answer to this one. Option C sounds right - NetAPI polling can increase bandwidth usage, so that's an important consideration.

upvoted 0 times

...