Exam NSE8_812 topic 1 question 25 discussion

Actual exam question from Fortinet's NSE8_812

Question #: 25
Topic #: 1

Refer to the exhibits, which show a firewall policy configuration and a network topology.

Configuration -

Topology -

An administrator has configured an inbound SSL inspection profile on a FortiGate device (FG-1) that is protecting a data center hosting multiple web pages.
Given the scenario shown in the exhibits, which certificate will FortiGate use to handle requests to xyz.com?

A. FortiGate will fall-back to the default Fortinet_CA_SSL certificate
B. FortiGate will reject the connection since no certificate is defined
C. FortiGate will use the Fortmet_CA_Untrusted certificate for the untrusted connection
D. FortiGate will use the first certificate in the server-cert list—the abc.com certificate

Show Suggested Answer

Suggested Answer: D 🗳️

by Viewable8041 at Sept. 5, 2023, 9:07 a.m.

Comments

Submit Cancel

ama6

9 months, 1 week ago

D is correct

upvoted 2 times

...

Davidrichard

9 months, 3 weeks ago

Selected Answer: D

D is correct

upvoted 4 times

...

Viewable8041

9 months, 4 weeks ago

Selected Answer: D

https://docs.fortinet.com/document/fortigate/7.4.1/administration-guide/850344/define-multiple-certificates-in-an-ssl-profile-in-replace-mode If there is no matched server certificate in the list, then the first server certificate in the list is used as a replacement.

upvoted 4 times

...