Exam NSE8_812 topic 1 question 38 discussion

Actual exam question from Fortinet's NSE8_812

Question #: 38
Topic #: 1

Refer to the exhibit containing the configuration snippets from the FortiGate.

Customer requirements:
SSLVPN Portal must be accessible on standard HTTPS port (TCP/443)
Public IP address (129.11.1.100) is assigned to port1
Datacenter.acmecorp.com resolves to the public IP address assigned to port1
The customer has a Let’s Encrypt certificate that is going to expire soon and it reports that subsequent attempts to renew that certificate are failing.
Reviewing the requirement and the exhibit, which configuration change below will resolve this issue?

Show Suggested Answer

Suggested Answer: A 🗳️

by Viewable8041 at Sept. 5, 2023, 1:29 p.m.

Comments

Submit Cancel

Viewable8041

Highly Voted 1 year, 4 months ago

Selected Answer: A

https://docs.fortinet.com/document/fortigate/7.4.1/administration-guide/822087/automatically-provision-a-certificate The redirect on port 80 will block the acme request

upvoted 5 times

...

kinge2

Most Recent 4 months, 2 weeks ago

Selected Answer: D

D is correct as you need to change default management from 443 to another port so you can use 443 for LetsEncrypt.

upvoted 1 times

...

Golux

1 year ago

Correct answer A https://community.fortinet.com/t5/FortiGate/Technical-Tip-ACME-certificate-enrollment-with-SSL-VPN/ta-p/193183

upvoted 2 times

...

ama6

1 year, 3 months ago

Viewable804re you sure it A looks like B is correct !!