I think it's BC
I checked on a Fortigate, In the GUI there is no option in the ZTNA server config for certificate actions. It's only possible in the CLI with "set empty-cert-action" wich is also the only action you can configure
I want to correct my previous answer.
The right answe is B and C.
Page 118.
A is wrong. FortiGate doesn't sign any certificate. FortiClient EMS signs the certificate for FortiClient endpoint.
B: BY DEFAULT, client certificate authentication is enabled on the access proxy policy and IT BLOCKS THE TRAFFIC IF THE CLIENT CERTIFICATE IS EMPTY.
C: If you look at the slide, the command "set client-cert" has the "disable" option: Disable client certificate request. So, it's true that certificate actions can be configured on the FortiGate CLI.
D is wrong: It says "By default", client certificate authentication is enabled on the access proxy policy. So, if there is a "default" mode, there must be another mode. And that other mode is "set client-cert disable". The "disable" option: Disable client certificate request.
B and D are correct. Page 118.
D: By default, client certificate authentication is enabled on the access proxy policy and it blocks the traffic if the client certificate is empty.
Zero Trust Access 7.2 Study Guide p118
"By default, client certificate authentication is enabled on the access proxy policy and it blocks the traffic if the client certificate is empty. You can change the action using the CLI, if required."
B is correct
D is correct
A is wrong
I think C is wrong due to the wording implying that all certificate actions can only be configured on the GUI.
By default client certificate authentication is enabled on the access proxy and it block the traffic if the client certificate is empty, You can change the action using the CLI, if required. Study Page 118 i think its BC
Study guide page 118:
By default client certificate authentication is enabled on the access proxy and it block the traffic if the client certificate is empty. You can change the action using the CLI, if required.
Could be both BC, BD and CD...
By default client certificate authentication is enabled on the access proxy and it block the traffic if the client certificate is empty
upvoted 1 times
...
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
fottyfan
3 months, 2 weeks agolucient
5 months agolucient
5 months agoDisposable_Me_2018
7 months, 1 week agoDisposable_Me_2018
7 months agokfaebu
8 months, 1 week agoFikachew
9 months, 1 week agosaulcastellanos8
9 months, 1 week ago