Ask Question
Fortinet FCSS_SASE_AD-24 Practice Test 1
Add to Whishlist
00:00:00
Report Issue
Restart testWhich event log subtype captures FortiSASE SSL VPN user creation?
Endpoint Events
VPN Events
User Events
Administrator Events
The event log subtype that captures FortiSASE SSL VPN user creation is User Events . This subtype is specifically designed to log activities related to user management, such as creating, modifying, or deleting user accounts. When an SSL VPN user is created, it falls under this category because it involves adding a new user to the system.
Here's why the other options are incorrect:
A . Endpoint Events: These logs pertain to activities related to endpoint devices, such as device registration, compliance checks, or security posture assessments. SSL VPN user creation is unrelated to endpoint events.
B . VPN Events: These logs capture activities related to VPN connections, such as session establishment, termination, or errors. While SSL VPN usage generates VPN events, the creation of a user account itself is not logged under this subtype.
D . Administrator Events: These logs track actions performed by administrators, such as configuration changes or policy updates. While an administrator might create the SSL VPN user, the specific event of user creation is categorized under User Events, not Administrator Events.
Fortinet FCSS FortiSASE Documentation - Event Logging and Subtypes
FortiSASE Administration Guide - Monitoring and Logging
Selling illegal goods, money scams etc.
Serious attack on a group.
Harassing an individual (including doxing)
Threatening or glorifying violence or serious harm, including self-harm
Nudity/Sexual content
Sexually explicit or suggestive imagery or writing involving minors
Sexually explicit or suggestive imagery or writing involving non-consenting adults or non-humans
Reusing content without attribution (link and blockquotes)
Not in English or has very bad formatting, grammar, and spelling
Author's credential is offensive, spam, or impersonation
Ex. Illegal content, incomplete question...
Restart test
