StudyByteLearn
← Fortinet NSE 4 - FortiOS 7.6 Administrator
NSE 4 · Certificates and encrypted traffic

Practice question 209 of 440 · medium

A policy uses certificate inspection and AV. A blocked website category works, but a test file from an allowed HTTPS host passes. Which change supplies the missing visibility?

Choose the single best answer.

  1. A.Apply suitable deep SSL inspection and client CA trust
  2. B.Enable logging for all forward sessions
  3. C.Add the inspection CA to destination addresses
  4. D.Switch AV to legacy without changing SSL inspection
Show the answer and explanation

✓ Correct answer

  • Apply suitable deep SSL inspection and client CA trust

Deep inspection exposes the encrypted file body to AV. More traffic logging or a scanner-mode change cannot decrypt it, and certificates are not firewall address objects.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.