FCP_FGT_AD-7.4 Exam QuestionsBrowse all questions from this exam

FCP_FGT_AD-7.4 Exam - Question 39

A network administrator has configured an SSL/SSH inspection profile defined for full SSL inspection and set with a private CA certificate. The firewall policy that allows the traffic uses this profile for SSL inspection and performs web filtering. When visiting any HTTPS websites, the browser reports certificate warning errors.

What is the reason for the certificate warning errors?

The SSL cipher compliance option is not enabled on the SSL inspection profile. This setting is required when the SSL inspection profile is defined with a private CA certificate.

The certificate used by FortiGate for SSL inspection does not contain the required certificate extensions.

The browser does not recognize the certificate in use as signed by a trusted CA.

With full SSL inspection it is not possible to avoid certificate warning errors at the browser level.

Show Answer

Correct Answer:

Discussion

5 comments

wsdeffwdOption: C

Sep 6, 2024

Page 173

s4mu3l007

Nov 6, 2024

ans is the C

f3eb371Option: C

Nov 12, 2024

C is this

vuhidusOption: C

Nov 20, 2024

C right one

sxcapOption: C

Dec 17, 2024

C, certificate is not recognized due to used a private CA, you must install the certificate in the end user devices or use a public SSL CA