View all questions & answers for the FCSS - Enterprise Firewall 7.4 Administrator Exam Materials exam


Question 45 Discussion

An administrator must minimize CPU and RAM use on a FortiGate firewall while also enabling essential security features, such as web filtering and application control for HTTPS traffic. Which SSL inspection setting helps reduce system load while also enabling security features, such as web filtering and application control for encrypted HTTPS traffic? (Choose one answer)

  • A. Use full SSL inspection to thoroughly inspect encrypted payloads.
  • B. Disable SSL inspection entirely to conserve resources.
  • C. Configure SSL inspection to handle HTTPS traffic efficiently.
  • D. Enable SSL certificate inspection mode to perform basic checks without decrypting traffic.
Correct Answer: D

Brave-Dump Clients Votes

D 100%

Comments



Brave-Dumps Admin 2025-04-28 15:10:39

Selected Answers: D


D is correct
EFW 7.4 study guide page 163 confirms that,

"If you need to conserve CPU or RAM resources in your firewall, SSL certificate inspection mode should be sufficient, covering SSL handshake inspection, server name indication (SNI) parsing, server certificate validation, URL extraction from SNI, URL extraction from certificate, web filtering, and application control."