StudyByteLearn
← Fortinet NSE 4 - FortiOS 7.6 Administrator
NSE 4 · Certificates and encrypted traffic

Practice question 225 of 440 · medium

The FortiGate GUI uses a new management HTTPS certificate, but outbound deep inspection still uses the old inspection CA. Why?

Choose the single best answer.

  1. A.Management identity and the SSL-profile signing CA are configured separately.
  2. B.Management and inspection certificates always use a single shared setting.
  3. C.Permitting TCP 443 automatically selects the new management certificate for inspection.
  4. D.Rebooting always replaces interception certificates with the management identity.
Show the answer and explanation

✓ Correct answer

  • Management identity and the SSL-profile signing CA are configured separately.

Management HTTPS identity and the SSL-profile CA are separate configurations. A service permit or reboot does not merge those roles or change the profile signing CA.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.