nse7_led-70 Exam - Question 37

Question

Refer to the exhibit. Examine the sections of the configuration shown in the output. What action will FortiGate take when verifying the student certificate through OCSP?

Examice · Accepted Answer

The configuration provided shows that the OCSP-status is enabled, the OCSP option is set to server, the default OCSP server is specified as 'FAC', and the strict OCSP check is enabled. Additionally, the unavail-action is set to revoke. This means that the FortiGate should reject the student certificate if the OCSP server status is unknown or if the server is unreachable. According to the configuration, the FortiGate will reject the student certificate if the OCSP server replies that the student certificate status is unknown.

aandreou020 · Answer

Answer C is correct. To validate they need both URL & certificate

kinge2 · Answer

A is correct as per study guide page 86

kinge2 · Answer

A is correct as per page 86 to 87 study guide

mollyk70 · Answer

A is correct P87 Study Guide

tochno · Answer

A is correct.
C is not correct as ocsp-option is set to server, not certificate

nse7_led-70 Exam - Question 37

Discussion