Refer to the exhibit.
Examine the sections of the configuration shown in the output.
What action will FortiGate take when verifying the student certificate through OCSP?
Exam nse7_led-70 All QuestionsBrowse all questions from this exam
Question 37
Correct Answer: A
The configuration provided shows that the OCSP-status is enabled, the OCSP option is set to server, the default OCSP server is specified as 'FAC', and the strict OCSP check is enabled. Additionally, the unavail-action is set to revoke. This means that the FortiGate should reject the student certificate if the OCSP server status is unknown or if the server is unreachable. According to the configuration, the FortiGate will reject the student certificate if the OCSP server replies that the student certificate status is unknown.
Discussion
aandreou020Option: C
Answer C is correct. To validate they need both URL & certificate
tochnoOption: A
A is correct. C is not correct as ocsp-option is set to server, not certificate
mollyk70Option: A
A is correct P87 Study Guide
kinge2Option: A
A is correct as per page 86 to 87 study guide
kinge2Option: A
A is correct as per study guide page 86