NSE4_FGT Question 19

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose A1

  Correct: A. Add user accounts to the Ignore User List. FortiGate Infrastructure 7.2 Study Guide (p.144): "The FSSO collector agent ignores any login events that match the Ignore User List entries. Therefore, these login events are not recorded by the collector agent, nor are they reported to FortiGate." Reference and download study guide: https://ebin.pub/fortinet-fortigate-infrastructure-study-guide-for-fortios-72.html

• 1

  ANSWER IS A

• Chose A2

  Study Guide – FSSO – FSSO Settings – Ignore User List. The FSSO collector agent ignores any logon events that match the Ignore User List entries. Therefore, these logo events are not recorded by the collector agent, nor are they reported to FG. It is a good practice to add all network service accounts to the Ignore User List. Service accounts tend to overwrite user logon events, and create issues with identity-based policy matching.