StudyByteLearn
← Fortinet NSE 4 - FortiOS 7.6 Administrator
NSE 4 · Fortinet Single Sign-On

Practice question 207 of 440 · medium

Which two observations separate FSSO collection from final authorization? Select two answers.

Select all that apply. Every correct option and no extras are required for credit in the app.

  1. A.A user visible at the collector proves every application is permitted
  2. B.The collector can observe a logon before the required group reaches FortiGate
  3. C.A correct FortiGate mapping can still fail a policy service match
  4. D.A correct directory password automatically enables every forward rule
Show the answer and explanation

✓ Correct answers

  • The collector can observe a logon before the required group reaches FortiGate
  • A correct FortiGate mapping can still fail a policy service match

Collection, delivered group mapping and policy matching are separate stages. Observed logons and valid credentials do not imply unrestricted application or rule access.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.