View all questions & answers for the NSE 7 - Enterprise Firewall 7.6 Administrator Exam Materials exam
NSE 7 - Enterprise Firewall 7.6 Administrator Exam Materials - Question #58 Discussion
Community Explanations & Comments (7)
l
11 months ago
Selected: A
I think A, because D sounds ridicilous.
Mike
10 months ago
Selected: D
since we want to protect the server and not the client we need to enable SSL Inspection of Protecting SSL Server. For that to function correctly you need to upload the Server certificate to have a valid certificate installed.
A would be needed if we want to secure the client from the server
A would be needed if we want to secure the client from the server
Adam
9 months ago
Selected: D
https://docs.fortinet.com/document/fortigate/7.6.5/administration-guide/55107/protecting-an-ssl-server
The Protecting SSL Server option of the SSL/SSH Inspection profile is typically applied to an inbound firewall policy for clients on the internet that access a server behind the FortiGate. FortiGate uses the server certificate of the protected server to simulate the real server, which enables FortiGate to decrypt and inspect traffic destined to the real server. Therefore, a valid server certificate must be installed on the FortiGate to enable traffic inspection.
The Protecting SSL Server option of the SSL/SSH Inspection profile is typically applied to an inbound firewall policy for clients on the internet that access a server behind the FortiGate. FortiGate uses the server certificate of the protected server to simulate the real server, which enables FortiGate to decrypt and inspect traffic destined to the real server. Therefore, a valid server certificate must be installed on the FortiGate to enable traffic inspection.
Mehdi
7 months ago
Selected: D
The current profile is set to "Multiple Clients Connecting to Multiple Servers" — this is for outbound/client traffic inspection
The Linux server hosts www.acmetest.com — this is an inbound attack scenario targeting a server
For protecting a specific SSL server, you need to switch to "Protecting SSL Server" mode
In this mode, FortiGate acts as a reverse proxy and needs the actual server certificate uploaded so it can decrypt and inspect inbound HTTPS traffic targeting that server
Without the server's certificate, FortiGate cannot decrypt inbound SSL to inspect for attacks
The Linux server hosts www.acmetest.com — this is an inbound attack scenario targeting a server
For protecting a specific SSL server, you need to switch to "Protecting SSL Server" mode
In this mode, FortiGate acts as a reverse proxy and needs the actual server certificate uploaded so it can decrypt and inspect inbound HTTPS traffic targeting that server
Without the server's certificate, FortiGate cannot decrypt inbound SSL to inspect for attacks
Anonymous User
6 months ago
Selected: D
Enterprise_Firewall_7.6_Administrator_Study_Guide page 182
Anonymous User
5 months ago
Selected: D
check the url ,the image their shows exactly what is described in option D and the inspect https is enabled by default, only can change the port or enable all ports check
https://docs.fortinet.com/document/fortigate/7.6.4/administration-guide/55107
https://docs.fortinet.com/document/fortigate/7.6.4/administration-guide/55107
Anonymous User
5 months ago
Selected: D
D is correct.
A is incorrect because if the port mapping isnt checked it uses the default value for it.
A is incorrect because if the port mapping isnt checked it uses the default value for it.
Refer to the exhibits. A network topology, firewall policy, and SSL/SSH inspection profile configuration are shown. What must you configure on firewall policy ID 2 to detect HTTPS attacks that target a Linux server hosting the website www.acmetest.com? (Choose one answer)
Brave-Dump Community Votes