StudyByteLearn
← Fortinet NSE 4 - FortiOS 7.6 Administrator
NSE 4 · Certificates and encrypted traffic

Practice question 227 of 440 · medium

Before broad outbound deep-inspection deployment, which two trust preparations are appropriate? Select two answers.

Select all that apply. Every correct option and no extras are required for credit in the app.

  1. A.Distribute Fortinet_CA_Untrusted as an enterprise trusted root
  2. B.Copy the inspection private key to every browser
  3. C.Distribute the public inspection CA to managed endpoint trust stores
  4. D.Protect the inspection signing CA's private key
Show the answer and explanation

✓ Correct answers

  • Distribute the public inspection CA to managed endpoint trust stores
  • Protect the inspection signing CA's private key

Endpoints need the public signing CA, and the private key must be controlled. Trusting the untrusted CA hides upstream failures; distributing the signing key creates unnecessary key exposure.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.