View all questions & answers for the NSE 6 - Network Security 7.6 Support Engineer Materials exam


Question 15 Discussion

Refer to the exhibit. Two entries that were generated in the FSSO collector agent log is shown. Which three conclusions can you draw from these log entries? (Choose three answers)

  • A. Remote registry is not running on the workstation.
  • B. The logged on user is part of a group that is not configured in the group filter.
  • C. DNS resolution is unable to resolve the workstation name.
  • D. A firewall is blocking traffic to port 139 and 445.
  • E. The user’s status shows as “not verified” in the collector agent
Correct Answer: A,D,E

Brave-Dump Clients Votes

ADE 66.67%
ACD 33.33%

Comments



Oscar Fabrice Zokou 2025-12-01 11:17:38

Selected Answers: A, C, D


for me
  • Adam 2026-01-03 09:16:31
    I think DNS can help with IP address change verification using reverse DNS lookup (PTR), but workstation check is for user change verification by detecting user SID using remote registry.

Anonymous User 2026-01-24 21:42:22

Selected Answers: A, D, E


A. Remote registry is not running on the workstation
The FSSO Collector Agent relies on WMI / Remote Registry access to query the logged-on user.
When it cannot retrieve the username, one common cause is that required Windows services (including Remote Registry) are not available or reachable.

D. A firewall is blocking traffic to port 139 and 445
“Failed to connect to workstation” strongly indicates SMB/RPC connectivity issues.
FSSO workstation checks require access to TCP 139 and 445 (and related RPC traffic). If these are blocked, the agent cannot query the host.

E. The user’s status shows as “not verified” in the collector agent
Because the agent cannot obtain the username, the user session cannot be verified.
In this condition, the Collector Agent marks the user as Not Verified.

Brave-Dumps Admin 2026-01-25 21:44:16

Selected Answers: A, D, E


A,D,E