StudyByteLearn
← Fortinet NSE 4 - FortiOS 7.6 Administrator
NSE 4 · Certificates and encrypted traffic

Practice question 210 of 440 · medium

Managed browsers accept deep inspection, but one mobile application rejects its substituted certificate. What should be investigated first?

Choose the single best answer.

  1. A.Whether the accepting firewall policy needs destination NAT
  2. B.Whether the endpoint should trust Fortinet_CA_Untrusted
  3. C.Whether the TLS session needs a DHCP relay
  4. D.Certificate pinning or app-specific trust requirements
Show the answer and explanation

✓ Correct answer

  • Certificate pinning or app-specific trust requirements

Pinning or a separate app trust store explains rejection despite OS trust. NAT and DHCP relay do not resolve substituted-certificate validation; trusting the untrusted inspection CA defeats its purpose.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.