exam questions

Exam FCP_FGT_AD-7.4 All Questions

View all questions & answers for the FCP_FGT_AD-7.4 exam

Exam FCP_FGT_AD-7.4 topic 1 question 39 discussion

Actual exam question from Fortinet's FCP_FGT_AD-7.4
Question #: 39
Topic #: 1
[All FCP_FGT_AD-7.4 Questions]

A network administrator has configured an SSL/SSH inspection profile defined for full SSL inspection and set with a private CA certificate. The firewall policy that allows the traffic uses this profile for SSL inspection and performs web filtering. When visiting any HTTPS websites, the browser reports certificate warning errors.
What is the reason for the certificate warning errors?

  • A. The SSL cipher compliance option is not enabled on the SSL inspection profile. This setting is required when the SSL inspection profile is defined with a private CA certificate.
  • B. The certificate used by FortiGate for SSL inspection does not contain the required certificate extensions.
  • C. The browser does not recognize the certificate in use as signed by a trusted CA.
  • D. With full SSL inspection it is not possible to avoid certificate warning errors at the browser level.
Show Suggested Answer Hide Answer
Suggested Answer: C 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
wsdeffwd
Highly Voted 4 months ago
Selected Answer: C
Page 173
upvoted 6 times
...
sxcap
Most Recent 3 weeks ago
Selected Answer: C
C, certificate is not recognized due to used a private CA, you must install the certificate in the end user devices or use a public SSL CA
upvoted 1 times
...
vuhidus
1 month, 2 weeks ago
Selected Answer: C
C right one
upvoted 1 times
...
f3eb371
1 month, 3 weeks ago
Selected Answer: C
C is this
upvoted 1 times
...
s4mu3l007
2 months ago
ans is the C
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago