StudyByteLearn
← Fortinet NSE 4 - FortiOS 7.6 Administrator
NSE 4 · Certificates and encrypted traffic

Practice question 211 of 440 · medium

A company wants inbound TLS inspection for its own published server while clients see the expected server identity. Which configuration fits?

Choose the single best answer.

  1. A.Certificate inspection plus the server public certificate only
  2. B.Web filter Exempt for the server hostname
  3. C.Protecting SSL Server with its certificate and private key
  4. D.Multiple Clients to Multiple Servers with no signing key
Show the answer and explanation

✓ Correct answer

  • Protecting SSL Server with its certificate and private key

Protecting SSL Server uses the controlled server identity and matching private key. Certificate-only inspection and Exempt do not provide payload inspection; outbound replacement signing is a different use case.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.