StudyByteLearn
← Fortinet NSE 4 - FortiOS 7.6 Administrator
NSE 4 · Certificates and encrypted traffic

Practice question 214 of 440 · easy

An SSL profile uses Server certificate SNI check = Strict. SNI and the certificate SAN/CN do not match. What is expected?

Choose the single best answer.

  1. A.The certificate CN is silently used and traffic always passes
  2. B.The profile switches from flow to proxy
  3. C.The inspection CA is automatically renewed
  4. D.The connection closes
Show the answer and explanation

✓ Correct answer

  • The connection closes

Strict closes a mismatched connection. Using CN on mismatch describes Enable; inspection mode and CA renewal are separate settings.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.