View all questions & answers for the NSE 4 - FortiOS 7.6 Administrator Exam Materials exam

NSE 4 - FortiOS 7.6 Administrator Exam Materials - Question #21 Discussion

Comment Image Comment Image Comment Image

A new administrator is configuring FSSO authentication on FortiGate using DC Agent Mode. Which step is NOT part of the expected process? (Choose one answer)

  • A. The DC agent sends login event data directly to FortiGate.
  • B. The user logs into the windows domain.
  • C. The collector agent forwards login event data to FortiGate.
  • D. FortiGate determines user identity based on the IP address in the FSSO list.
Correct Answer: A

Brave-Dump Community Votes

Answer: A (4 votes) 80%
Answer: C (1 vote) 20%

Community Explanations & Comments (5)

Thomas Pfaff 10 months ago
Selected: A
For DC agent FSSO, it goes:
- DC authentication (aka login)
- DC agent installed on DC pushes to collector agent
- Collector agent pushes to Fortinet
- Fortinet allows login with DC information

The DC agent does not send information directly to the Fortigate
Thomas Pfaff 10 months ago
See 2nd image here: https://community.fortinet.com/t5/FortiGate/Technical-Tip-FSSO-choose-between-DC-Agent-mode-or-Polling-mode/ta-p/252651
Mujz 8 months ago
Selected: C
The DC agent sends data to the collector Agent and the collector agent sends it to FortiGate C is correct
Sean Foster 8 months ago
That is correct, but the question asks What is NOT a process, Therefore it’s A as DC agent does not communicate directly with the Fortigate.
Anonymous User 8 months ago
Selected: A
It’s A
Naiyar Rizvi 6 months ago
Selected: A
In DC Agent Mode, the flow is:

Actual Process:
User logs into Windows domain ✔️
DC Agent (on Domain Controller) detects login ✔️
Collector Agent gathers login events ✔️
Collector Agent → FortiGate sends user/IP mapping ✔️
FortiGate uses IP-to-user mapping ✔️
Ahmed El Hasseen El Tom El Shaikh Berair 3 months ago
Selected: A
21