Fortinet Exam FCSS_NST_SE-7.4 Topic 3 Question 10 Discussion

Actual exam question for Fortinet's FCSS_NST_SE-7.4 exam

Question #: 10
Topic #: 3

Consider the scenario where the server name indication (SNI) does not match either the common name (CN) or any of the subject alternative names (SAN) in the server certificate.

Which action will FortiGate take when using the default settings for SSL certificate inspection?

AFortiGate uses the SNI from the user's web browser.

BFortiGate closes the connection because this represents an invalid SSL/TLS configuration.

CFortiGate uses the first entry listed in the SAN field in the server certificate.

DFortiGate uses the ZN information from the Subject field in the server certificate.

Show Suggested Answer

Suggested Answer: A, D

by Talia at Jan 25, 2025, 12:28 AM

Limited Time Offer

25%

Off

Get Premium FCSS_NST_SE-7.4 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Bette

3 days ago

But what if FortiGate uses the first entry listed in the SAN field in the server certificate?

upvoted 0 times

...

Ming

6 days ago

I believe FortiGate will use the SNI from the user's web browser.

upvoted 0 times

...

Bette

11 days ago

I think FortiGate will close the connection because it's an invalid SSL/TLS configuration.

upvoted 0 times

...