Fortinet Exam NSE8_811 Topic 1 Question 42 Discussion

Actual exam question for Fortinet's NSE8_811 exam

Question #: 42
Topic #: 1

You configure an outgoing firewall policy with a web filter for accessing the internet. The access to URL https// itacm.co and web belonging to the same category should be blocked. You notice that the Web server presents a certificate with CN=www acme.com. The www.it.acme site is as '' information Technology and the www.acme.com site is categorized as ''Business".

Which statements is correct in this scenario?

ACategory 'information Technology' needs to blocked, the FortiGate is able to inspection the URL with HTTPS sessions.

BCategory 'Business' need a to be block: the certificate name takes precedence over the SNI.

CSSL inspection must be configured to deep-inspection: the category 'information Technology 'needs to be blocked.

DCategory :information Technology' needs to be blocked, the SNI takes precedence over the certificate name.

Show Suggested Answer

Suggested Answer: D

''FortiOS parses TLS server name indication (SNI) from TSL Client Hello. When this value has been retrieved, it will be used for non-deep web filtering inspection, in preference to the existing HTTPS Server CN web filtering.''

by Tammara at May 27, 2022, 08:43 PM

Limited Time Offer

25%

Off

Get Premium NSE8_811 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Currently there are no comments in this discussion, be the first to comment!