Fortinet Exam NSE4_FGT-7.2 Topic 2 Question 18 Discussion

Actual exam question for Fortinet's NSE4_FGT-7.2 exam

Question #: 18
Topic #: 2

[All NSE4_FGT-7.2 Questions]

What are two features of collector agent advanced mode? (Choose two.)

AIn advanced mode, FortiGate can be configured as an LDAP client and group filters can be configured on FortiGate.

BIn advanced mode, security profiles can be applied only to user groups, not individual users.

CAdvanced mode uses the Windows convention---NetBios: Domain\Username.

DAdvanced mode supports nested or inherited groups.

Show Suggested Answer

Suggested Answer: A, D

A) In advanced mode, FortiGate can be configured as an LDAP client and group filters can be configured on FortiGate.

This is true because advanced mode allows FortiGate to query the LDAP server directly for user information and group membership, without relying on the collector agent. This enables FortiGate to apply security policies based on LDAP group filters, which can be configured on FortiGate1

D) Advanced mode supports nested or inherited groups.

This is true because advanced mode can handle complex group structures, such as nested groups or inherited groups, where a user belongs to a group that is a member of another group. This allows FortiGate to apply security policies based on the effective group membership of a user, not just the direct group membership1

FortiGate Infrastructure 7.2 Study Guide (p.146): 'Also, advanced mode supports nested or inherited groups; that is, users can be members of subgroups that belong to monitored parent groups.' 'In advanced mode, you can configure FortiGate as an LDAP client and configure the group filters on FortiGate. You can also configure group filters on the collector agent.'

by Hillary at Oct 22, 2023, 03:16 AM

Limited Time Offer

25%

Off

Get Premium NSE4_FGT-7.2 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Jesusa

8 months ago

I agree, those seem like the most logical choices. Although, I have to say, 'NetBios: Domain\Username' is a pretty funny way to describe authentication in advanced mode.

upvoted 0 times

...