StudyByteLearn
← Fortinet NSE 4 - FortiOS 7.6 Administrator
NSE 4 · FortiSASE and onboarding

Practice question 98 of 440 · medium

An agentless proxy user receives certificate warnings only when deep inspection intercepts permitted HTTPS. Which prerequisite is relevant?

Choose the single best answer.

  1. A.Only switch to a different IdP while retaining the untrusted inspection CA
  2. B.A policy that merely permits TCP without the CA
  3. C.Trust in the required inspection CA on that client
  4. D.An assumption that PAC distribution installs every certificate
Show the answer and explanation

✓ Correct answer

  • Trust in the required inspection CA on that client

The client must trust the inspection CA used to sign intercepted server certificates. Changing IdP, merely permitting TCP or distributing a PAC file does not establish that trust.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.