Exam NSE4_FGT-7.2 topic 1 question 42 discussion

I really want to advise all who is studying and taking the exam soon.This Q: Question #: 42, the ans is : C. NetAPI polling can increase bandwidth usage in large networks. Reason being, when NetAPI: polls sessions created on the DC, it only polls user logins and NOT logouts. And as such it does this every 9seconds if default timer is used. Hence, it will generate alot of bandwidth in large networks.

the question is "describes NetAPI polling mode for the FSSO collector agent", NetAPI is one of 3 method used by the "Polling mode" of FSSO-CA (the second mode is DC-Agent), the issue related to large network is with the WinSecLog mode and means about lost logins information not bandwidth issue, the third mode is WMI that's a windows API so not related to NetAPI mode, so correct answer is B

Can anyone explain why their answer is B? Every resource I can find shows that the NetSessionEnum function only returns logon events and not logout. My answer is C

B is the one

C P128

C is correct, It was mentioned also in the self-study for the test in LESSON 03: Fortinet Single Sign-On (FSSO)

The information about logout is completely wrong. It only gets login info from the DC. The right answer is C.

NetAPI: polls temporary sessions created on the DC when a user logs in or logs out and calls the NetSessionEnum function on Windows.

B is correct as NetAPI is capable to poll both login and logout sessions. The only drawback of this mentioned in fortinet documents is regarding the miss login events when DC is under heavy system load

The answer is C

NetAPI polling does not track user log out through NetSessionEnum function. This function is used to retrieve info about session established on a server but it does not specifically track user log outs

FSSO CANNOT get logout on an AD server. Answer is C.

Answer is B you can check FortiGate Infrastructure 7.2 Study Guide p.128 NetAPI: Polls temporary sessions created on the DC when users logs in or logs out and calls the NetSessionEnum function on Windows.

Ans B : The NetAPI polling use the NetSessionEnum Microsoft API from netapi32.dll to detect the users that have established session on the domain controller.

I think D stands as the correct answer because the question is asking what correctly describes the polling mode. In this case, the polling method scans a Microsoft or Windows DC using the windows API (netapi32.dll) for logged in users. https://community.fortinet.com/t5/FortiGate/Technical-Note-FSSO-NetAPI-polling-bandwidth-usage-calculator/ta-p/196417

C is the correct answer.

FortiGate Infrastructure 7.2 Study Guide p.128