StudyByteLearn
← Fortinet NSE 4 - FortiOS 7.6 Administrator
NSE 4 · Inspection modes and web filtering

Practice question 249 of 440 · medium

A browser reaches a category Warning page over HTTPS but reports an untrusted issuer. Which preparation targets this?

Choose the single best answer.

  1. A.Trust the CA signing the replacement page on the client.
  2. B.Trust only the original upstream site CA on FortiGate.
  3. C.Enable forward traffic logging without changing endpoint trust.
  4. D.Assume a hostname Allow rule changes the warning-page signing CA.
Show the answer and explanation

✓ Correct answer

  • Trust the CA signing the replacement page on the client.

The client must trust the CA signing the HTTPS interaction page. Upstream validation on FortiGate, traffic logging and hostname policy actions do not install that signing-CA trust on the endpoint.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.