StudyByteLearn
← Fortinet NSE 4 - FortiOS 7.6 Administrator
NSE 4 · Certificates and encrypted traffic

Practice question 221 of 440 · easy

In the 7.6.0 SSL-profile documentation, an upstream CA is untrusted. Which default action is listed?

Choose the single best answer.

  1. A.Allow
  2. B.Block
  3. C.Ignore and re-sign as trusted
  4. D.Automatically import the upstream CA
Show the answer and explanation

✓ Correct answer

  • Allow

The documented untrusted-CA default is Allow. Block is configurable; Ignore is a full-inspection choice, not the default, and upstream CAs are not automatically trusted.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.