NSE 5 - FortiWeb 8.0 Administrator Exam Materials - Question #64 Discussion

Refer to the exhibit. You are configuring SSL offloading on FortiWeb to protect a public-facing application. Clients connect using HTTPS, while FortiWeb forwards requests to the back-end server using HTTP. You are reviewing certificate deployment and need to decide where to install the private key for the certificate used in client connections. In this SSL offloading setup, which device is responsible for using the private key associated with the web server certificate? (Choose one answer)

• A. The server, because it always handles certificates regardless of SSL mode.
• B. FortiWeb, because it terminates the HTTPS session and decrypts traffic.
• C. None. SSL offloading does not require a private key because FortiWeb only forwards traffic.
• D. The client, because it initiates the TLS handshake and verifies the certificate.

Brave-Dump Community Votes