FSSO I

Descripción

NSE4 6.0 NSE4 6.0 Test sobre FSSO I, creado por Marcos Avila el 25/07/2018.
Marcos Avila
Test por Marcos Avila, actualizado hace más de 1 año
Marcos Avila
Creado por Marcos Avila hace más de 6 años
29
1

Resumen del Recurso

Pregunta 1

Pregunta
FSSO software identifies: (Select 3)
Respuesta
  • User´s ID
  • IP Address
  • Group Membership
  • Group Users
  • Computers hostname

Pregunta 2

Pregunta
Microsoft AD types mode:
Respuesta
  • Polling mode Agent mode
  • collector agent-based Agentless

Pregunta 3

Pregunta
Polling mode:
Respuesta
  • Collector agent-based Agentless
  • Polling mode Agent mode

Pregunta 4

Pregunta
In FSSO, FortiGate allows network access based on
Respuesta
  • a. Active user authentication with username and password
  • b. Passive user identification by user ID, IP address, and group membership

Pregunta 5

Pregunta
Which working mode is used for monitoring user sign-on activities in Windows AD? 0
Respuesta
  • a. Polling mode (collector agent-based or agentless)
  • b. eDirectory agent mode

Pregunta 6

Pregunta
DC Agent is responsible for:
Respuesta
  • Monitoring user logon events and forwarding them to the collector agents Handling DNS lookups (by default)
  • Group veritication Workstation checks Updates of logon records on FortiGate Sending domain local security group, organizational units (OUs), and global security group information to FortiGate

Pregunta 7

Pregunta
Collector agent is responsible for:
Respuesta
  • Group veritication Workstation checks Updates of logon records on FortiGate Sending domain local security group, organizational units (OUs), and global security group information to FortiGate
  • Monitoring user logon events and forwarding them to the collector agents Handling DNS lookups (by default)

Pregunta 8

Pregunta
DC agent mode requires: Two DC agent installed on each Windows DC If you have multiple DCs, this means that you need multiple DC agents. DC agents monitor and forward user logon events to the collector agents.
Respuesta
  • True
  • False

Pregunta 9

Pregunta
Collector Agent sends: (Select 4)
Respuesta
  • User name
  • Host name
  • IP address
  • User groups(s)
  • MAC address
  • Ports

Pregunta 10

Pregunta
Ports used for DC Agent
Respuesta
  • The collector agent communicates with FortiGate over TCP port 8000 (default) and it listens on UDP port 8002 (default) for updates from the DC agents. The ports are customizable.
  • The collector agent communicates with FortiGate over TCP port 8002 (default) and it listens on UDP port 8000 (default) for updates from the DC agents. The ports are customizable.

Pregunta 11

Pregunta
Collector agents uses:
Respuesta
  • SMB TCP 445 protocol, by default, to request the event logs. TCP 135, TCP 139, and UDP 137 as fallbacks
  • SMB TCP 134 protocol, by default, to request the event logs. TCP 135, TCP 139, and UDP 137 as fallbacks

Pregunta 12

Pregunta
Three methods of the collector agent for collecting logon information:
Respuesta
  • NetAPI
  • WinSecLog
  • WMI
  • SMB
  • TCP

Pregunta 13

Pregunta
Polls temporary sessions created on the DC when a user logs in or logs off and calls the NetSessionEnum function on Windows. It’s faster than the WinSec and WMI methods; however, it can miss some logon events if a DC is under heavy system load. This is because sessions can be quickly created and purged from RAM, before the agent has a chance to poll and notify Forthate.
Respuesta
  • NetAPl
  • WinSecLog
  • WMI

Pregunta 14

Pregunta
Polls all the security event logs from the DC. It doesn't miss any logon events that have been recorded by the DC because events are not normally deleted from the logs. There can be some delay in FortiGate receiving events if the network is large and, therefore, writing to the logs is slow. It also requires that the audit success of specific event IDS is recorded in the Windows security logs. For a full list of supported event IDs, visit the Fortinet knowledge base site (http://kb.fortinet.com).
Respuesta
  • WlnSecLog
  • NetAPI
  • WMI

Pregunta 15

Pregunta
A Windows API that gets system information from a Windows server. The DC returns all requested logon events. The collector agent is a WMI client and sends WMI queries for user logon events to the DC, which, in this case, is a WMI server. The collector agent doesn't need to search security event logs on the DC for user logon events; instead, the DC returns all requested logon events. This reduces network load between the collector agent and DC.
Respuesta
  • WMI
  • NetAPI
  • WinSecLog

Pregunta 16

Pregunta
Installation: Complex—multiple installations (one per DC). Requires reboot. DC agent required: Yes Resources: Shares with DC agents Scalability: Higher Redundancy: Yes Level of confidence: Captures all logons
Respuesta
  • DC Agent mode
  • Polling Mode

Pregunta 17

Pregunta
Installation: Easy—one or no installations. No reboot required. DC agent required: No Resources: Has own resources Scalability: Lower Redundancy: No Level of confidence: Might miss a logon (NetAPl), or have a delay (WinSeoLog)
Respuesta
  • DC Agent mode
  • Polling Mode

Pregunta 18

Pregunta
DC agent mode requires one DC agent -----(1) installed on each Windows DC in the -------(2)
Respuesta
  • 1- dcagent.dll 2- Windows\system32
  • 1- system32.dll 2- Windows\dcagent.dll
Mostrar resumen completo Ocultar resumen completo

Similar

1. LA CÉLULA
Vivi Riquero
Repaso de tiempos verbales en inglés
maya velasquez
Economía Estrategia y Desarrollo Empresarial
Isabel Ordoñez M
Las partes del cuerpo en francés
Mónica Sánz
Animales vertebrados: clasificación y características
Reyna Isabel Mayorga
PRUEBA DE MATEMÁTICAS GRADO ONCE
jennydaza28
Grupos funcionales (Bioquímica)
Nadim Bissar
Ciclo Celular
valentina marchant
PROMO 2021 - THIRD PERSON RULES (6 a 7p.m)
Miguel Hurtado
AMBIENTES VIRTUALES DE APRENDIZAJE (AVA)
naansara1993
TEMA 3. EL GOBIERNO Y LA ADMINISTRACIÓN
ana maroto