StudyByteLearn
← Fortinet NSE 4 - FortiOS 7.6 Administrator
NSE 4 · Certificates and encrypted traffic

Practice question 212 of 440 · medium

A flow policy uses full inspection. TCP 8443 is decrypted although HTTPS mapping lists only 443. What explains this?

Choose the single best answer.

  1. A.The mapped HTTPS list is ignored only when the policy denies traffic
  2. B.Flow deep inspection scans all ports irrespective of mapping
  3. C.The destination NAT engine always converts HTTPS to 443
  4. D.AV legacy mode expands certificate-only inspection
Show the answer and explanation

✓ Correct answer

  • Flow deep inspection scans all ports irrespective of mapping

Flow deep inspection scans all ports. NAT has no automatic port conversion rule of that kind, AV modes do not determine decryption, and denied traffic is not the inspection case.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.