StudyByteLearn
← Fortinet NSE 4 - FortiOS 7.6 Administrator
NSE 4 · Certificates and encrypted traffic

Practice question 230 of 440 · hard

Which two statements about TLS port coverage are correct for 7.6.0? Select two answers.

Select all that apply. Every correct option and no extras are required for credit in the app.

  1. A.Certificate inspection in either mode honors mapping unless all-ports is enabled
  2. B.Proxy deep inspection always ignores protocol mapping
  3. C.The built-in certificate profile is editable and covers every port
  4. D.Flow deep inspection scans all ports regardless of mapping
Show the answer and explanation

✓ Correct answers

  • Certificate inspection in either mode honors mapping unless all-ports is enabled
  • Flow deep inspection scans all ports regardless of mapping

Flow deep inspection and certificate inspection have different mapping rules. Proxy deep inspection honors mapping, and the built-in certificate profile is read-only and covers 443.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.