Exam NSE4_FGT-6.0 topic 1 question 17 discussion

i think is C&D

C and D. Page 239, Infrastructure 6.0 Study Guide v2

C&D is correct

Page 265, Infrastructure 6.4 Study Guide

las respuestas son C y D, la explicación aqui: https://kb.fortinet.com/kb/documentLink.do?externalID=FD47732

B&D. C is a true statment, but is not what they are asking.

C&D is correct answer : This is from Fortinet 6.2 Training: WMl: A Windows API that gets system information from a Windows server. The DC returns all requested logon events. The collector agent is a WMI client and sends WMI queries for user logon events to the DC, which, in this case, is a WMI server. The collector agent doesn't need to search security event logs on the DC for user logon events; instead, the DC returns all requested logon events. This reduces network load between the collector agent and DC.

, DC returns all requested logon events via WMI. This also reduces network load between CA and DC. it means WMI decrease bandwidth usage instead of increasing it.... so B is not correct. C & D is

3) Event log using WMI polling: WMI is a Windows API to get system information from a Windows server, CA is a WMI client and sends WMI queries for user logon events to DC, which in this case is a WMI server. Main advantage in this mode is that CA does not need to search security event logs on DC for user logon events, instead, DC returns all requested logon events via WMI. This also reduces network load between CA and DC. https://kb.fortinet.com/kb/documentLink.do?externalID=FD47732

should be C and D