Fortinet Exam FCSS_NST_SE-7.4 Topic 1 Question 12 Discussion

Actual exam question for Fortinet's FCSS_NST_SE-7.4 exam

Question #: 12
Topic #: 1

Refer to the exhibit, which shows a partial output of the fssod daemon real-time debug command.

What two conclusions can you draw Itom the output? (Choose two.)

AThe workstation with IP 10.124.2.90 will be polled frequently using TCP port 445 to see if the user is still logged on.

BThe logon event can be seen on the collector agent installed on Windows.

CFSSO is using DC agent mode to detect logon events.

DFSSO is using agentless polling mode to detect logon events.

Show Suggested Answer

Suggested Answer: A, D

by Alesia at Mar 04, 2025, 08:36 PM

Limited Time Offer

25%

Off

Contribute your Thoughts:

Submit Cancel

2 days ago

I disagree, I believe it's C.

upvoted 0 times

...

2 days ago

B and C seem like plausible conclusions from the information given. The collector agent and DC agent mode are mentioned.

upvoted 0 times

...

5 days ago

I think the answer is A.

upvoted 0 times

...

9 days ago

The output shows the workstation IP and the port used, so I'd say A and D are the correct answers.

upvoted 0 times

...