FCP_FGT_AD-7.6 · Question #37
Refer to the exhibit. The predefined deep-inspection and custom-deep-inspection profiles exclude some web categories from SSL inspection, as shown in the exhibit. For which two reasons are these web…
The correct answer is A. The FortiGate temporary certificate denies the browser's access to websites that use HTTP Strict D. The legal regulation aims to prioritize user privacy and protect sensitive information for these. FortiGate's temporary SSL certificate may cause access denial to sites using HTTP Strict Transport Security (HSTS), so such sites are exempted from deep SSL inspection. Legal regulations require exemption of certain categories to protect user privacy and sensitive information…
Question
Refer to the exhibit. The predefined deep-inspection and custom-deep-inspection profiles exclude some web categories from SSL inspection, as shown in the exhibit. For which two reasons are these web categories exempted? (Choose two.)
Exhibit
Options
- AThe FortiGate temporary certificate denies the browser's access to websites that use HTTP Strict
- BThese websites are in an allowlist of reputable domain names maintained by FortiGuard.
- CThe resources utilization is optimized because these websites are in the trusted domain list on
- DThe legal regulation aims to prioritize user privacy and protect sensitive information for these
How the community answered
(36 responses)- A72% (26)
- B8% (3)
- C19% (7)
Explanation
FortiGate's temporary SSL certificate may cause access denial to sites using HTTP Strict Transport Security (HSTS), so such sites are exempted from deep SSL inspection. Legal regulations require exemption of certain categories to protect user privacy and sensitive information, so these web categories are excluded from SSL inspection.
Topics
Community Discussion
No community discussion yet for this question.