StudyByteLearn
← Fortinet NSE 4 - FortiOS 7.6 Administrator
NSE 4 · Certificates and encrypted traffic

Practice question 229 of 440 · medium

Which two profile settings directly explain why an accepted HTTPS session remains encrypted to AV? Select two answers.

Select all that apply. Every correct option and no extras are required for credit in the app.

  1. A.Certificate inspection is selected
  2. B.The session matches a deep-inspection exemption
  3. C.AV events are written to FortiAnalyzer
  4. D.A specific source address object matches the policy
Show the answer and explanation

✓ Correct answers

  • Certificate inspection is selected
  • The session matches a deep-inspection exemption

Certificate inspection and SSL exemption remove payload visibility. Log destination and source-address matching alone do not prevent decryption.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.