NSE4_FGT Question 12

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose D1

  D. When Full SSL Inspection is enabled, the FortiGate performs a process known as SSL/TLS Interception (or authorized Man-in-the-Middle). This is exactly the behavior described in the question: HTTPS → displays a certificate warning. HTTP → does not use TLS certificates, so it does not display an error.

• Chose D2

  With full SSL inspection, FortiGate: Decrypts HTTPS traffic Re-signs it using its own certificate (CA) If that FortiGate CA is not installed/trusted in the browser/device → Browser shows certificate warning

• Chose D2

  With full SSL inspection, FortiGate: Decrypts HTTPS traffic Re-signs it using its own certificate (CA) If that FortiGate CA is not installed/trusted in the browser/devic