Exam NSE8_811 topic 1 question 54 discussion

Actual exam question from Fortinet's NSE8_811

Question #: 54
Topic #: 1

You configured a firewall policy with only a Web filter profile for accessing the Internet. Access to websites belonging to the "Information Technology" category are blocked and to the "Business" category are allowed. SSL deep inspection is not enabled on this policy.
A user wants to access the website https://www.it-acme.com which presents a certificate with CN=www.acme.com. The it-acme.com domain is categorized as
"Information Technology" and the acme.com domain is categorized as "Business".
Which statement regarding this scenario is correct?

A. The FortiGate is able to read the URL within HTTPS sessions when using SSL certificate inspection so the website will be blocked by the "Information Technology".
B. The website will be blocked by category "Information Technology" as the SNI takes precedence over the certificate name.
C. The website will be allowed by category "Business" as the certificate name takes precedence over the URL.
D. Only with SSL deep inspection enabled will the FortiGate be able to categorized this website.

Show Suggested Answer

Suggested Answer: B 🗳️

by Sb_2021 at Jan. 21, 2022, 1:46 p.m.

Comments

Submit Cancel

Sb_2021

3 years, 3 months ago

Selected Answer: B

https://community.fortinet.com/t5/FortiGate/HTTPS-Webfiltering-without-deep-scan-enabled-details/ta-p/197546?externalID=FD34661

upvoted 1 times

...

Exam NSE8_811 All Questions

View all questions & answers for the NSE8_811 exam

Exam NSE8_811 topic 1 question 54 discussion

Comments

Sb_2021

SY0-701