exam questions

Exam NSE8_812 All Questions

View all questions & answers for the NSE8_812 exam

Exam NSE8_812 topic 1 question 25 discussion

Actual exam question from Fortinet's NSE8_812
Question #: 25
Topic #: 1
[All NSE8_812 Questions]

Refer to the exhibits, which show a firewall policy configuration and a network topology.

Configuration -


Topology -

An administrator has configured an inbound SSL inspection profile on a FortiGate device (FG-1) that is protecting a data center hosting multiple web pages.
Given the scenario shown in the exhibits, which certificate will FortiGate use to handle requests to xyz.com?

  • A. FortiGate will fall-back to the default Fortinet_CA_SSL certificate
  • B. FortiGate will reject the connection since no certificate is defined
  • C. FortiGate will use the Fortmet_CA_Untrusted certificate for the untrusted connection
  • D. FortiGate will use the first certificate in the server-cert list—the abc.com certificate
Show Suggested Answer Hide Answer
Suggested Answer: D 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
ama6
3 months, 2 weeks ago
D is correct
upvoted 2 times
...
Davidrichard
4 months, 1 week ago
Selected Answer: D
D is correct
upvoted 4 times
...
Viewable8041
4 months, 1 week ago
Selected Answer: D
https://docs.fortinet.com/document/fortigate/7.4.1/administration-guide/850344/define-multiple-certificates-in-an-ssl-profile-in-replace-mode If there is no matched server certificate in the list, then the first server certificate in the list is used as a replacement.
upvoted 4 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago