StudyByteLearn
← Fortinet NSE 4 - FortiOS 7.6 Administrator
NSE 4 · Certificates and encrypted traffic

Practice question 228 of 440 · medium

Which two failures can reject a certificate whose leaf signature is cryptographically valid? Select two answers.

Select all that apply. Every correct option and no extras are required for credit in the app.

  1. A.The policy has forward-traffic logging enabled
  2. B.The requested hostname is absent from SAN
  3. C.The chain cannot reach a trusted root
  4. D.The destination firewall service is named HTTPS
Show the answer and explanation

✓ Correct answers

  • The requested hostname is absent from SAN
  • The chain cannot reach a trusted root

Identity mismatch and chain failure are independent certificate checks. Service-object names and traffic logging do not invalidate a certificate signature or identity.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.