NSE 7 - Secure Networking 7.6 Architect Exam Materials - Question #39 Discussion

Consider the scenario where the server name indication (SNI) does not match either the common name (CN) or any of the subject alternative names (SAN) in the server certificate. Which two actions will FortiGate take when using the default settings for SSL certificate inspection? (Choose two answers)

• A. FortiGate uses the CN information from the Subject field in the server certificate.
• B. FortiGate uses the SNI from the user's web browser.
• C. FortiGate will automatically rewrite the SNI to match the CN in the certificate.
• D. FortiGate does not decrypt the traffic if the traffic is allowed by the web filter profile.

Brave-Dump Community Votes