StudyByteLearn
← Fortinet NSE 4 - FortiOS 7.6 Administrator
NSE 4 · Certificates and encrypted traffic

Practice question 213 of 440 · medium

A proxy full-inspection profile has Inspect all ports disabled and HTTPS mapping 443. A service on 8443 lacks decryption. Which narrowly scoped change fits?

Choose the single best answer.

  1. A.Add 8443 to the HTTPS mapping
  2. B.Enable all application-control categories
  3. C.Trust Fortinet_CA_Untrusted on all clients
  4. D.Disable server-certificate checking globally
Show the answer and explanation

✓ Correct answer

  • Add 8443 to the HTTPS mapping

Proxy deep inspection honors mapping unless all-ports inspection is enabled. Adding the known port addresses the cause without changing unrelated application actions or suppressing trust checks.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.