FCP_FGT_AD-7.4 · Question #64
Which two attributes are required on a certificate so it can be used as a CA certificate on SSL inspection? (Choose two.)
The correct answer is B. The CA extension must be set to TRUE D. The keyUsage extension must be set to keyCertSign. Although it appears as though the user browser is connected to the web server, the browser is connected to FortiGate. FortiGate is acting as a proxy web server. In order for FortiGate to act in these roles, its CA certificate must have the basic constraints extension set to…
Question
Which two attributes are required on a certificate so it can be used as a CA certificate on SSL inspection? (Choose two.)
Options
- AThe issuer must be a public CA
- BThe CA extension must be set to TRUE
- CThe Authority Key Identifier must be of type SSL
- DThe keyUsage extension must be set to keyCertSign
How the community answered
(27 responses)- A19% (5)
- B74% (20)
- C7% (2)
Explanation
Although it appears as though the user browser is connected to the web server, the browser is connected to FortiGate. FortiGate is acting as a proxy web server. In order for FortiGate to act in these roles, its CA certificate must have the basic constraints extension set to cA=True and the value of the keyUsage extension set to keyCertSign.
Topics
Community Discussion
No community discussion yet for this question.