View all questions & answers for the FCP - FortiAuthenticator 6.5 Administrator Exam Materials exam
Question 17 Discussion
Comments
Selected Answers: A
Polling of the Security Event Log is configured to occur every 5 seconds so that any login event that has occurred
since the previous poll is captured and entered into FSSO.
Note that while login events can be detected from the security event logs, logout events cannot. This is due to the
fact that logout events can be triggered by many different processes, many that are not indicative of the user
logging out.
While some methods natively support logout detection (like the FortiClient SSO Mobility Agent), others such as
AD polling do not. To enable logout detection, FortiAuthenticator supports Windows Management Instrumentation
(WMI) polling to identify the current logged on user state for a device and log the user out. A manual timeout
period can also be set to remove the user from the authorization table
Which FSSO discovery method transparently detects logged off users without having to rely on external features such as WMI polling? (Choose one answer)
Brave-Dump Clients Votes