In which scenario is deep inspection (full inspection) most appropriate?

When the organization wants to minimize performance impact on the firewall

When the organization needs to block malware hidden in encrypted web traffic

When the organization wants to validate certificates without decrypting traffic

When the organization wants to avoid installing a CA certificate on client devices

Which statement accurately describes a difference between certificate inspection and full inspection?

Both modes decrypt traffic, but full inspection also validates the certificate chain.

Certificate inspection validates the server certificate without decrypting traffic, while full inspection decrypts and inspects the payload.

Full inspection is only used for SSH traffic, while certificate inspection is only used for SSL.

Certificate inspection decrypts and inspects the payload, while full inspection only validates the certificate.

An administrator wants to validate SSL certificates without decrypting the traffic. Which configuration is required?

Create a certificate inspection profile and apply it to the SSL inspection policy.

Use an SSH inspection profile with a custom CA certificate.

Create a full inspection profile and select a CA certificate for decryption.

Disable SSL inspection entirely and rely on the firewall's antivirus profile.

An administrator wants to exclude traffic to a specific financial website from SSL inspection. Which configuration should be used?

Change the CA certificate for that domain

Add the domain to the exemption list in the SSL/SSH inspection profile

Create a separate firewall policy with SSL inspection disabled

Disable the antivirus profile for that domain

FortinetNSE 7 - Enterprise Firewall Administrator

Domain 3Objective 1

Manage SSL/SSH Inspection Profiles, Based on a Scenario NSE7-ENTERPRISE-FIREWALL-ADMINISTRATOR Practice Questions (Page 3)

Part of the Security Profiles domain, which makes up ~23% of our current practice bank. Fortinet does not publish an official question count, but from its 70-minute exam (~30–45 total, ~7–10 in this domain), expect 2–3 from this objective — we provide 26 practice questions to prepare you well beyond it. (estimate)

26questions here

6free pages

6concepts

Questions 11–15

11foundation · easy
In which scenario is deep inspection (full inspection) most appropriate?
Select an answer first
12foundation · easy
Which statement accurately describes a difference between certificate inspection and full inspection?
Select an answer first
13foundation · easy
An administrator wants to validate SSL certificates without decrypting the traffic. Which configuration is required?
Select an answer first
14foundation · easy
An administrator wants to exclude traffic to a specific financial website from SSL inspection. Which configuration should be used?
Select an answer first
15foundation · easy
Users report certificate errors when accessing HTTPS sites. Which log type should an administrator check first to diagnose the issue?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NSE7-ENTERPRISE-FIREWALL-ADMINISTRATOR

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Fortinet. “NSE7-ENTERPRISE-FIREWALL-ADMINISTRATOR” is a trademark of its owner, used for identification only.