Exam FCSS_EFW_AD-7.4 topic 1 question 3 discussion

Actual exam question from Fortinet's FCSS_EFW_AD-7.4

Question #: 3
Topic #: 1

A company's guest internet policy, operating in proxy mode, blocks access to Artificial Intelligence Technology sites using FortiGuard. However, a guest user accessed a page in this category using port 8443.
Which configuration changes are required for FortiGate to analyze HTTPS traffic on nonstandard ports like 8443 when full SSL inspection is active in the guest policy?

A. Add a URL wildcard domain to the website CA certificate and use it in the SSL/SSH Inspection Profile.
B. In the Protocol Port Mapping section of the SSL/SSH Inspection Profile, enter 443, 8443 to analyze both standard (443) and non-standard (8443) HTTPS ports.
C. To analyze nonstandard ports in web filter profiles, use TLSv1.3 in the SSL/SSH Inspection Profile.
D. Administrators can block traffic on nonstandard ports by enabling the SNI check in the SSL/SSH Inspection Profile.

Show Suggested Answer

Suggested Answer: B 🗳️

by Yaghu at March 20, 2025, 9:34 a.m.

Comments

Submit Cancel

tioeudes

3 days ago

Selected Answer: B

letter b is the only one that makes sense.

upvoted 1 times

...

Tweefo

1 week, 1 day ago

Selected Answer: B

B is correct “Because the firewall in this example has not enabled protocol port mapping for HTTPS and port 8443, the user will bypass the firewall…” “Protocol port mapping can be enabled... only if SSL inspection is activated… and the appropriate protocol port-mapping settings are configured.” Source : Study Guide 166

upvoted 1 times

...

Yaghu

2 weeks ago

Selected Answer: B

Answer B appears to be the only answer pertaining to port mapping.

upvoted 1 times

...

Exam FCSS_EFW_AD-7.4 All Questions

View all questions & answers for the FCSS_EFW_AD-7.4 exam

Exam FCSS_EFW_AD-7.4 topic 1 question 3 discussion

Comments

tioeudes

Tweefo

Yaghu

SY0-701