StudyByteLearn
← Fortinet NSE 4 - FortiOS 7.6 Administrator
NSE 4 · Inspection modes and web filtering

Practice question 245 of 440 · medium

An HTTPS rule should permit /research but block /games on one host. Certificate inspection sees the host but no path. What is needed?

Choose the single best answer.

  1. A.Suitable deep SSL inspection
  2. B.An additional root route
  3. C.A category usage quota
  4. D.A second hostname-only static entry
Show the answer and explanation

✓ Correct answer

  • Suitable deep SSL inspection

Path matching requires decrypted HTTP information. Routes and quotas do not expose the path; a second rule for the same visible hostname cannot distinguish encrypted paths.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.