Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Fortinet Certified Solution Specialist: Enterprise Firewall & Secure Networking 7.6 Architect · Fortinet
Select 2 answers.
This question asks for 2 answers, but our data marks only 1. Compare with the community discussion below for the full answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
B. You can effectively apply a web filtering profile to this traffic y la D. The client supports only TLS versions 1.2 and 1.3. (its show)
Page 166 in the Enterprise Firewall Admin 7.6 study guide. Page 283 in the FortiOS 7.6 Administrator Study Guide.
Why B is correct (Web filtering) With certificate inspection, FortiGate can still read: SNI (Server Name Indication) That allows: URL category lookup Web filtering to work So: Web filtering works without decrypting traffic Why A is wrong (Antivirus) Antivirus requires: Full payload inspection That needs: Deep SSL inspection (decryption) Certificate inspection = metadata only No payload = no AV Why C is wrong (SAN) SAN is part of the server certificate But at Client Hello stage: No certificate exchanged yet Not required for applying security profiles Why D is correct (TLS versions) From capture: supported_versions: TLS 1.3, TLS 1.2 This explicitly shows: Client supports only TLS 1.2 and 1.3 So D is correct