StudyByteLearn
← Fortinet NSE 4 - FortiOS 7.6 Administrator
NSE 4 · Certificates and encrypted traffic

Practice question 222 of 440 · medium

An SSL profile uses certificate inspection. Why is its HTTP/3 action unavailable for editing?

Choose the single best answer.

  1. A.HTTP/3 runs on TCP 443 and cannot be filtered.
  2. B.Switching only flow to proxy makes it editable while retaining certificate inspection.
  3. C.Trusting the inspection CA on endpoints unlocks the HTTP/3 selector.
  4. D.HTTP/3 is fixed to Bypass in that inspection method.
Show the answer and explanation

✓ Correct answer

  • HTTP/3 is fixed to Bypass in that inspection method.

Certificate inspection fixes HTTP/3 to Bypass. Changing the policy processing mode or endpoint trust does not change the inspection method; full inspection exposes other actions. HTTP/3 uses QUIC over UDP.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.