A FortiGate administrator is configuring full SSL inspection and wants to ensure that traffic to banking websites is not inspected due to regulatory requirements. What is the best way to achieve this?

Enable SSL inspection but configure the FortiGate to not log banking traffic.

Use a web filter to block banking websites entirely.

Install the FortiGate's CA certificate on banking websites' servers.

Create a firewall policy that bypasses SSL inspection for traffic to the banking websites' IP addresses.

What is the primary purpose of the FortiGate's SSL inspection certificate in a full SSL inspection deployment?

To decrypt the traffic from the client

To authenticate the FortiGate to the destination server

To encrypt the traffic between the FortiGate and the destination server

To re-encrypt the decrypted traffic before sending it to the client

An administrator wants to detect if users are using SSH to tunnel traffic that bypasses the firewall. What should the administrator enable on the FortiGate to see this activity?

Full SSL inspection on the firewall policy that handles outbound HTTPS traffic.

Intrusion prevention system (IPS) to detect SSH exploits.

SSH inspection on the firewall policy that handles outbound SSH traffic.

Application control to block SSH applications.

Why is it necessary to install the FortiGate's private CA certificate on client endpoints when using full SSL inspection?

To authenticate the client to the FortiGate

To allow the FortiGate to decrypt the client's traffic

To prevent the client from seeing certificate errors for the FortiGate's inspection certificate

To encrypt the traffic between the client and the FortiGate

FortinetNSE 4 - FortiOS 7.6 Administrator

Domain 3Objective 1

Explain and Inspect Encrypted Traffic Using Certificates NSE4-FORTIOS-ADMINISTRATOR Practice Questions (Page 2)

Part of the Content Inspection domain, which accounts for 25-30% of the NSE4-FORTIOS-ADMINISTRATOR exam. Fortinet does not publish an official question count, but from its 90-minute exam (~35–60 total, ~9–18 in this domain), expect 2–4 from this objective — we provide 18 practice questions to prepare you well beyond it. (estimate)

18questions here

4free pages

5concepts

25-30%of the exam

Questions 6–10

6expert · hard
A FortiGate administrator is configuring full SSL inspection and wants to ensure that traffic to banking websites is not inspected due to regulatory requirements. What is the best way to achieve this?
Select an answer first
7foundation · easy
Which of the following is a common certificate issue that can be resolved by renewing the certificate?
Select an answer first
8foundation · easy
What is the primary purpose of the FortiGate's SSL inspection certificate in a full SSL inspection deployment?
Select an answer first
9application · medium
An administrator wants to detect if users are using SSH to tunnel traffic that bypasses the firewall. What should the administrator enable on the FortiGate to see this activity?
Select an answer first
10foundation · easy
Why is it necessary to install the FortiGate's private CA certificate on client endpoints when using full SSL inspection?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NSE4-FORTIOS-ADMINISTRATOR

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Fortinet. “NSE4-FORTIOS-ADMINISTRATOR” is a trademark of its owner, used for identification only.