Fortinet Exam NSE8_812 Topic 1 Question 2 Discussion

Actual exam question for Fortinet's NSE8_812 exam

Question #: 2
Topic #: 1

A remote worker requests access to an SSH server inside the network. You deployed a ZTNA Rule to their FortiClient. You need to follow the security requirements to inspect this traffic.

Which two statements are true regarding the requirements? (Choose two.)

AFortiGate can perform SSH access proxy host-key validation.

BYou need to configure a FortiClient SSL-VPN tunnel to inspect the SSH traffic.

CSSH traffic is tunneled between the client and the access proxy over HTTPS

DTraffic is discarded as ZTNA does not support SSH connection rules

Show Suggested Answer

Suggested Answer: A, C

ZTNA supports SSH connection rules that allow remote workers to access SSH servers inside the network through an HTTPS tunnel between the client and the access proxy (FortiGate). The access proxy acts as an SSH client to connect to the real SSH server on behalf of the user, and performs host-key validation to verify the identity of the server. The user can use any SSH client that supports HTTPS proxy settings, such as PuTTY or OpenSSH. Reference: https://docs.fortinet.com/document/fortigate/7.0.0/ztna-deployment/899992/configuring-ztna-rules-to-control-access

by Tegan at Jul 04, 2023, 02:41 AM

Limited Time Offer

25%

Off

Get Premium NSE8_812 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Currently there are no comments in this discussion, be the first to comment!