Copy and Edit

FSSO II

Description

NSE4 6.0 NSE4 6.0 Quiz on FSSO II, created by Marcos Avila on 25/07/2018.
Marcos Avila
Quiz by Marcos Avila, updated more than 1 year ago
Marcos Avila
Created by Marcos Avila over 6 years ago
411
1
0

Resource summary

Question 1

Question
TCP ports 139 its optional, only TCP port 445 must be opened between collector agents or FortiGate and all hosts.
Answer
  • True
  • False

Question 2

Question
Which is the recommended mode for FSSO deployments?
Answer
  • a. DC agent mode
  • b. Polling mode: Agentless

Question 3

Question
Which FSSO mode requires more FortiGate system resources (CPU and RAM)?
Answer
  • a. Polling mode: Collector agent-based
  • b. Polling mode: Agentless

Question 4

Question
Is a suite of Microsoft security protocols that provides authentication, integrity, and confidentiality to users.
Answer
  • NTLM
  • WinSecLog
  • NetAPI
  • WMI

Question 5

Question
NTLM
Answer
  • NT LAN Manager
  • Network LAN Microsoft

Question 6

Question
Simple domain configurations for NTLM authentication
Answer
  • a. do not require a DC agent
  • b. require only one global collector agent

Question 7

Question
When performing NTLM authentication, what information does the web browser supply to FortiGate?
Answer
  • a. The user's credentials (username and password)
  • b. The user’s user ID, IP address, and group membership

Question 8

Question
Which of the following may cause an NTLM authentication to occur?
Answer
  • a. Traffic coming from an IP on the F850 user list
  • b. Traffic coming from an IP not on the FSSO user list

Question 9

Question
The FSSO collector agent can access Windows AD in one of two modes:
Answer
  • Standard Advanced
  • Agent mode Polling mode

Question 10

Question
Notice that you do not need to match the F880 version with your exact FortiGate firmware version. When installing FSSO, grab the latest collector agent for your major release. You do however, need to match the dcagent version to the collector agent version.
Answer
  • True
  • False

Question 11

Question
The maximum number of Windows AD user groups allowed on a FortiGate depends on the model.
Answer
  • Low-end FortiGate models support 256 Windows AD user groups. Mid-range and high-end models can support more groups. This is per VDOM, if VDOMs are enabled on FortiGate.
  • Low-end FortiGate models support 526 Windows AD user groups. Mid-range and high-end models can support more groups. This is per VDOM, if VDOMs are enabled on FortiGate.

Question 12

Question
This setting controls when the collector agent connects to individual workstations on port 139 (or port 445), and uses the remote registry service to verify if a user is still logged on to the same station. It changes the status of the user under Show logon User, to not verified when it cannot connect to the workstation. If it does connect, it verifies the user and the status remains OK. To facilitate this verification process, the remote registry service should be set to auto start on all domain member PCs.
Answer
  • Workstation verify Interval.
  • Dead entry timeout Interval.
  • IP address change verify Interval.
  • Cache user group lookup result.

Question 13

Question
This setting applies only to entries with an unverified status. When an entry is not verified, the collector starts this timer. It‘s used to age out the entry. When the timer expires, the logon is removed from the collector. From FortiGate’s perspective, there is no difference between entries that are OK and entries that are not verified. Both are considered valid.
Answer
  • Dead entry timeout Interval.
  • Workstation verify Interval.
  • IP address change verify Interval.
  • Cache user group lookup result.

Question 14

Question
This setting checks the IP addresses of logged in users and updates the FortiGate when a user‘s IP addresses change. This timer is especially important in DHCP or dynamic environments to prevent users from being locked out if they change lP addresses. The domain's DNS server should be accurate; if the DNS server does not update the affected records promptly, the collector agent's lP information will be inaccurate.
Answer
  • IP address change verify Interval.
  • Workstation verify Interval.
  • Dead entry timeout Interval.
  • Cache user group lookup result.

Question 15

Question
This setting caches the user group membership for a defined period of time. It is not updated, even if the user changes group membership in AD.
Answer
  • Cache user group lookup result.
  • IP address change verify Interval.
  • Dead entry timeout Interval.
  • Workstation verify Interval.

Question 16

Question
Uses the Windows convention NetBios: Domain\Username.
Answer
  • Standard mode
  • Advanced mode

Question 17

Question
Uses the LDAP convention: CN=User, OU=Name, DC=Domain.
Answer
  • Standard mode
  • Advanced mode

Question 18

Question
AD Group support (Select 4)
Answer
  • Security groups
  • Universal groups
  • Groups inside OUs
  • Local or universal groups that contain universal groups from child domains (only with Global Catalog)
  • Global Catalog
  • Local groups

Question 19

Question
If you have collector agents, either using the DC agent mode or the collector agent-based polling mode, what 880 setting should you select on FortiGate?
Answer
  • a. Poll Active Directory Server
  • b. Fortinet Single—Sign-On Agent

Question 20

Question
Filtering from FortiGate can only be done if the collector agent is in which AD access mode?
Answer
  • a. Standard
  • b. Advanced

Question 21

Question
Which of the following naming conventions does the F880 collector agent use to access the Windows AD in Standard access mode?
Answer
  • a. Windows convention — NetBios: Domain\Username
  • b. LDAP convention: CN=User, OU=Name, DC=Domain

Question 22

Question
Which logging level shows the logon events on the collector agent?
Answer
  • a. Information
  • b. Warning

Question 23

Question
The command diagnose debug fsso-polling detail displays information for which mode of FSSO?
Answer
  • a. Agentless polling mode
  • b. Collector agent based polling mode
Show full summary Hide full summary

Want to create your own Quizzes for free with GoConqr? Learn more.

Similar

IGCSE CHEMISTRY
Apira
MR BRYANT AMERICAN NATION FINAL FLASHCARDS
grantwilliammaxe
AS-Level Chemistry: Unit 1:The Atom
Daena Targaryen
TOEFL English Vocab (A - M)
Ali Kane
AS Media Studies Terminology
Mourad
ICT GENERAL KNOWLEDGE
Liz Riggs
NSI Test First day
brahim matrix
el centro comercial
Nicholas Guardad
HEMORRAGIAS - OBST PATOLOGICA
María José Alvarez Gazzano
Chapter 16: The Cold War
Becca Strobbe
Music Therapy Practice Exam (with explanations)
Hannah Rebecca
Browse Library