View all questions & answers for the NSE 4 - FortiOS 7.6 Administrator Exam Materials exam

NSE 4 - FortiOS 7.6 Administrator Exam Materials - Question #5 Discussion

Comment Image Comment Image Comment Image
Question Diagram

Refer to the exhibit. The predefined deep-inspection and custom-deep-inspection profiles exclude some web categories from SSL inspection, as shown in the exhibit. For which two reasons are these web categories exempted? (Choose two answers)

  • A. The FortiGate temporary certificate denies the browser's access to websites that use HTTP Strict Transport Security.
  • B. These websites are in an allowlist of reputable domain names maintained by FortiGuard.
  • C. The resources utilization is optimized because these websites are in the trusted domain list on FortiGate.
  • D. The legal regulation aims to prioritize user privacy and protect sensitive information for these websites.
Correct Answer: A,D

Brave-Dump Community Votes

Answer: A, D (6 votes) 75%
Answer: B, C (1 vote) 12.5%
Answer: B, D (1 vote) 12.5%

Community Explanations & Comments (8)

SP 1 year ago
Selected: B, C
these 2 are correct
Moussaa 1 year ago
Selected: B, D
in some coutries the law dont allow to inspect banks and health ssl
Mahboab Ali Ghaleb 1 year ago
Selected: A, D
The correct answer is A & D as Explained in FortiGate 7.6 Administrator Study Guide, Page 205.
You may need to exempt traffic from SSL inspection if it is causing problems with traffic, or for legal reasons.
Why option B is incorrect, Reputable websites is disabled in the exhibit and it contains of allowlists to bypass SSL deep inspection, So it isn't the reason of exempt.
Daniell Drummond 1 year ago
Selected: A, D
Option A because the study guide does reference having to exempt sites with strict user checking. Option D because legal regulation in some countries and even in the US this needs to be handled with care. There are a number of deployments where when SSL inspection is of topic, you are meeting with lawyers on the do's and don'ts.
Brave-Dumps.com Admin 1 year ago
Selected: A, D
I go to A & D
CABGroup 8 months ago
Selected: A, D
ad
Sidney 3 months ago
Selected: A, D
these 2 are correct
Anonymous User 1 month ago
Selected: A, D
AD