Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Fortinet NSE8_812 Exam - Topic 1 Question 2 Discussion

A remote worker requests access to an SSH server inside the network. You deployed a ZTNA Rule to their FortiClient. You need to follow the security requirements to inspect this traffic.Which two statements are true regarding the requirements? (Choose two.)
A) FortiGate can perform SSH access proxy host-key validation. and C) SSH traffic is tunneled between the client and the access proxy over HTTPS
B) You need to configure a FortiClient SSL-VPN tunnel to inspect the SSH traffic.
D) Traffic is discarded as ZTNA does not support SSH connection rules

Fortinet NSE8_812 Exam - Topic 1 Question 2 Discussion

Actual exam question for Fortinet's NSE8_812 exam
Question #: 2
Topic #: 1
[All NSE8_812 Questions]

A remote worker requests access to an SSH server inside the network. You deployed a ZTNA Rule to their FortiClient. You need to follow the security requirements to inspect this traffic.

Which two statements are true regarding the requirements? (Choose two.)

Show Suggested Answer Hide Answer
Suggested Answer: A, C

ZTNA supports SSH connection rules that allow remote workers to access SSH servers inside the network through an HTTPS tunnel between the client and the access proxy (FortiGate). The access proxy acts as an SSH client to connect to the real SSH server on behalf of the user, and performs host-key validation to verify the identity of the server. The user can use any SSH client that supports HTTPS proxy settings, such as PuTTY or OpenSSH. Reference: https://docs.fortinet.com/document/fortigate/7.0.0/ztna-deployment/899992/configuring-ztna-rules-to-control-access


by Tegan at Jul 04, 2023, 02:41 AM

Limited Time Offer

25%

Off

Get Premium NSE8_812 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Diane
7 months ago
Wait, are we sure about C? That seems off.
upvoted 0 times
...
Ryan
7 months ago
D can't be true, ZTNA does support SSH rules.
upvoted 0 times
...
Fannie
7 months ago
C sounds right, SSH traffic goes over HTTPS.
upvoted 0 times
...
Nana
7 months ago
B is definitely needed for SSH traffic inspection.
upvoted 0 times
...
Rashad
8 months ago
A is true, FortiGate does host-key validation.
upvoted 0 times
...
Lavonna
8 months ago
I have a vague memory of ZTNA not supporting SSH rules, which makes me lean towards option D, but I need to double-check that.
upvoted 0 times
...
Desmond
8 months ago
I recall that SSH traffic is usually tunneled over HTTPS, so option C could be a possibility.
upvoted 0 times
...
Kenneth
8 months ago
I'm not entirely sure, but I feel like we discussed needing an SSL-VPN tunnel for inspecting SSH traffic in one of our practice questions.
upvoted 0 times
...
Susana
8 months ago
I think option A might be correct because I remember something about FortiGate validating host keys for SSH connections.
upvoted 0 times
...
Jamal
8 months ago
Hmm, this seems like it could be a bit complex. I'll need to make sure I fully understand the scenario and the different configuration options.
upvoted 0 times
...
Kristal
9 months ago
Hmm, I'm a bit unsure about this one. I'll need to review my notes on management representations to decide which option best fits.
upvoted 0 times
...
Annabelle
9 months ago
Hmm, I'm a bit unsure about this one. I know the PDCCH is used for control signaling, but I'm not sure if it's specifically for cell identification and search. Let me think this through a bit more.
upvoted 0 times
...
Tiera
9 months ago
Hmm, I'm not entirely confident. A part of me thinks it's related to HTTP, but again, I remember discussing Telnet and port 23 in class.
upvoted 0 times
...
Luke
9 months ago
"Management" sounds plausible too, especially since the senior managers are so experienced. But I'm not sure if it's as critical as the other factors.
upvoted 0 times
...

Save Cancel