NSE 8 - Recertification Exam (813) Materials - Question #98 Discussion

An administrator has configured a FortiGate device to authenticate SSL VPN users using digital certificates. A FortiAuthenticator is the certificate authority (CA) and the OCSP server. Part of the FortiGate configuration is shown below: Based on this configuration, which authentication scenario will FortiGate deny? (Choose one answer)

• A. FortiAuthenticator responds to an OCSP request that the user certificate status is unknown.
• B. The user certificate does not contain User Principal Name (UPN) information.
• C. The user certificate does not contain the OCSP URL.
• D. FortiAuthenticator responds to an OCSP request that the user certificate authority is untrusted.

Brave-Dump Community Votes