Which of the following statements best describes how the collector agent learns that a user has logged off from the network?
A. The workstation fails to reply to the polls frequently done by the collector agent.
B. The DC agent captures the log off event from the event logs, which it forwards to the collector agent.
C. The work station notifies the DC agent that the user has logged off.
D. The collector agent gets the logoff events when polling the respective domain controller.
|
Download Printable PDF. VALID exam to help you PASS. |
 |
when the user logs off no event log is generated, that why the collector agents pool the workstations in order to see if the users are still there. So the answer would A
Sure looks like D…. “In polling mode, the Collector Agent polls port 445 of each domain controller for user logon information every few seconds and forwards it to the FortiGate”
A
It’s Wrong, the answer is A