StudyByteLearn
← Fortinet NSE 4 - FortiOS 7.6 Administrator
NSE 4 · Certificates and encrypted traffic

Practice question 224 of 440 · medium

A correctly named, unexpired server certificate is listed as revoked by its issuing CA. Which distinction matters?

Choose the single best answer.

  1. A.A CRL contains the server's replacement private key
  2. B.Revocation can invalidate an otherwise correctly signed certificate
  3. C.Only expiry can make a signed certificate invalid
  4. D.The SAN automatically overrides revocation
Show the answer and explanation

✓ Correct answer

  • Revocation can invalidate an otherwise correctly signed certificate

Revocation is an independent validity issue. Name and date checks do not cancel it, and CRLs list revocations rather than private keys.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.