ExamTopics Logo
Mail Us[email protected]
Menu
Fortinet Discussions
exam questions

Exam NSE8_812 All Questions

View all questions & answers for the NSE8_812 exam
Go to Exam

Exam NSE8_812 topic 1 question 67 discussion

Actual exam question from Fortinet's NSE8_812
Question #: 67
Topic #: 1
[All NSE8_812 Questions]

An administrator has configured a FortiGate device to authenticate SSL VPN users using digital certificates. A FortiAuthenticator is the certificate authority (CA) and the Online Certificate Status Protocol (OCSP) server.

Part of the FortiGate configuration is shown below:



Based on this configuration, which statement is true?

  • A. If the OCSP response is CertStatus unknown, authentication will succeed if the certificate matches the CA.
  • B. OCSP checks will always go to the configured FortiAuthenticator.
  • C. If the OCSP server is unreachable, authentication will succeed if the certificate matches the CA.
  • D. The OCSP check of the certificate can be combined with a certificate revocation list.
Show Suggested Answer Hide Answer
Suggested Answer: C 🗳️
by beach_mouse at July 25, 2024, 10:28 p.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
kinge2
3 months, 2 weeks ago
Selected Answer: B
B correct
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago