A policy is intended to inspect multiple local clients connecting to external HTTPS servers, rather than protect a published SSL server. One allowed session shows the original public certificate issuer. Which conclusion is justified?

Choose the single best answer.

A.Endpoint trust of the inspection CA proves this session was fully decrypted.
B.An accepting firewall policy alone guarantees SSL payload inspection.
C.The original issuer proves the session used an expired certificate.
D.Certificate-only inspection or an exemption should be investigated.

Show the answer and explanation

✓ Correct answer

Certificate-only inspection or an exemption should be investigated.

For the stated outbound multi-client use case, an original public issuer suggests no replacement certificate was presented for this session. Check certificate-only mode and exemptions. Endpoint trust and policy acceptance alone do not prove decryption, and issuer identity does not establish certificate expiry.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.