StudyByteLearn
← Fortinet NSE 4 - FortiOS 7.6 Administrator
NSE 4 · Certificates and encrypted traffic

Practice question 220 of 440 · medium

A user sees a FortiGate CA warning only when a website is blocked. Allowed sites show their original issuer. Which explanation fits?

Choose the single best answer.

  1. A.The web-filter block automatically enables proxy inspection for all sessions
  2. B.Certificate inspection signs HTTPS replacement pages
  3. C.Every allowed HTTPS payload is decrypted without replacement signing
  4. D.The browser ignores CA stores for denied traffic
Show the answer and explanation

✓ Correct answer

  • Certificate inspection signs HTTPS replacement pages

Certificate inspection can sign a replacement page without decrypting all allowed content. Browser CA checks still apply; a single block does not globally change inspection mode.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.