StudyByteLearn
← Fortinet NSE 4 - FortiOS 7.6 Administrator
NSE 4 · Application control

Practice question 268 of 440 · medium

A cloud-storage application is identified, but an HTTPS upload-specific rule never triggers. Certificate inspection is applied. What is the best next investigation?

Choose the single best answer.

  1. A.Whether the static route needs an application ID
  2. B.Whether that function signature needs decrypted requests
  3. C.Whether all HTTPS apps require proxy mode
  4. D.Whether the firewall must deny TCP 443 first
Show the answer and explanation

✓ Correct answer

  • Whether that function signature needs decrypted requests

TLS metadata can identify a broad app while encrypted request content hides a function. Proxy-only assumptions, a deny path and application IDs in routes do not resolve visibility.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.