Fortinet Exam FCSS_NST_SE-7.4 Topic 3 Question 10 Discussion

Actual exam question for Fortinet's FCSS_NST_SE-7.4 exam

Question #: 10
Topic #: 3

Consider the scenario where the server name indication (SNI) does not match either the common name (CN) or any of the subject alternative names (SAN) in the server certificate.

Which action will FortiGate take when using the default settings for SSL certificate inspection?

AFortiGate uses the SNI from the user's web browser.

BFortiGate closes the connection because this represents an invalid SSL/TLS configuration.

CFortiGate uses the first entry listed in the SAN field in the server certificate.

DFortiGate uses the ZN information from the Subject field in the server certificate.

Show Suggested Answer

Suggested Answer: A, D

by Talia at Jan 25, 2025, 12:28 AM

Limited Time Offer

25%

Off

Get Premium FCSS_NST_SE-7.4 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Leigha

3 months ago

Wow, this question is really testing my SSL/TLS knowledge. I'm going to have to brush up on those certificate fields before the exam.

upvoted 0 times

Matthew

1 months ago

C) FortiGate uses the first entry listed in the SAN field in the server certificate.

upvoted 0 times

...

Clare

1 months ago

B) FortiGate closes the connection because this represents an invalid SSL/TLS configuration.

upvoted 0 times

...

Delfina

2 months ago

A) FortiGate uses the SNI from the user's web browser.

upvoted 0 times

...

Dick

3 months ago

I bet the developers at FortiGate had a good laugh coming up with these answer choices. 'ZN information?' Seriously?

upvoted 0 times

Ressie

2 months ago

I wonder how they came up with those specific choices.

upvoted 0 times

...

Gladys

2 months ago

I think they could have been a bit clearer with the options.

upvoted 0 times

...

Tomas

2 months ago

Yeah, those answer choices are pretty interesting.

upvoted 0 times

...

Lawrence

3 months ago

Wait, is the ZN field a real thing? Sounds like something you'd find in a Sci-Fi movie, not a networking exam. I'm going to have to research that one.

upvoted 0 times

...

Antione

3 months ago

I was thinking B) sounded like the most secure option, but it might cause some connectivity issues. Hmm, tricky trade-off between security and usability.

upvoted 0 times

Sue

1 months ago

D) FortiGate uses the CN information from the Subject field in the server certificate.

upvoted 0 times

...

Breana

1 months ago

C) FortiGate uses the first entry listed in the SAN field in the server certificate.

upvoted 0 times

...

Thea

2 months ago

B) FortiGate closes the connection because this represents an invalid SSL/TLS configuration.

upvoted 0 times

...

Stephanie

2 months ago

A) FortiGate uses the SNI from the user's web browser.

upvoted 0 times

...

Ronna

3 months ago

The default settings for SSL certificate inspection seem a bit strict. I hope FortiGate doesn't just close the connection, that would be inconvenient.

upvoted 0 times