Which of the following is a valid use case for full SSL inspection?

Preventing users from accessing HTTPS websites

Blocking malware that is hidden in encrypted HTTPS traffic

Speeding up HTTPS connections by caching content

Encrypting all traffic between the client and the server

An organization wants to prevent data exfiltration via SSH tunnels while still allowing developers to SSH to external servers for legitimate work. The security team is considering enabling SSH inspection on the FortiGate. What is the primary challenge they should address?

SSH inspection will decrypt all SSH traffic, which may break SSH key-based authentication.

SSH inspection requires installing a CA certificate on all endpoints.

SSH inspection will significantly degrade performance for all SSH sessions.

SSH inspection may not be able to distinguish between legitimate SSH sessions and tunneling.

A company wants to prevent data loss by blocking sensitive information from being uploaded to web-based email services. They have a FortiGate with full SSL inspection enabled. Which feature should the administrator use to inspect the content of HTTPS uploads?

Intrusion prevention system (IPS) profile to detect data exfiltration signatures.

Web filter profile to block the webmail domain.

Application control profile to block web-based email services.

Data leak prevention (DLP) profile applied to the firewall policy.

FortinetNSE 4 - FortiOS 7.6 Administrator

Domain 3Objective 1

Explain and Inspect Encrypted Traffic Using Certificates NSE4-FORTIOS-ADMINISTRATOR Practice Questions (Page 4)

Part of the Content Inspection domain, which accounts for 25-30% of the NSE4-FORTIOS-ADMINISTRATOR exam. Fortinet does not publish an official question count, but from its 90-minute exam (~35–60 total, ~9–18 in this domain), expect 2–4 from this objective — we provide 18 practice questions to prepare you well beyond it. (estimate)

18questions here

4free pages

5concepts

25-30%of the exam

Questions 16–18

16foundation · easy
Which of the following is a valid use case for full SSL inspection?
Select an answer first
17expert · hard
An organization wants to prevent data exfiltration via SSH tunnels while still allowing developers to SSH to external servers for legitimate work. The security team is considering enabling SSH inspection on the FortiGate. What is the primary challenge they should address?
Select an answer first
18application · medium
A company wants to prevent data loss by blocking sensitive information from being uploaded to web-based email services. They have a FortiGate with full SSL inspection enabled. Which feature should the administrator use to inspect the content of HTTPS uploads?
Select an answer first

Finished these 3 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to NSE4-FORTIOS-ADMINISTRATOR

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Fortinet. “NSE4-FORTIOS-ADMINISTRATOR” is a trademark of its owner, used for identification only.

Explain and Inspect Encrypted Traffic Using Certificates NSE4-FORTIOS-ADMINISTRATOR Practice Questions (Page 4)

Questions 16–18

Which of the following is a valid use case for full SSL inspection?

An organization wants to prevent data exfiltration via SSH tunnels while still allowing developers to SSH to external servers for legitimate work. The security team is considering enabling SSH inspection on the FortiGate. What is the primary challenge they should address?

A company wants to prevent data loss by blocking sensitive information from being uploaded to web-based email services. They have a FortiGate with full SSL inspection enabled. Which feature should the administrator use to inspect the content of HTTPS uploads?

Keep studying — Content Inspection