FCSS_LED_AR-7.6 · Question #28
Which features does FortiAuthenticator support when acting as a certificate authority (CA)?
The correct answer is D. It can act as a self-signer for issuing and revoking digital certificates. When FortiAuthenticator is configured to act as a Certificate Authority (CA), it can: - Act as a self-signed root CA or an intermediate CA. - Issue and revoke digital certificates for users, devices, or Fortinet components (e.g., FortiGate, FortiAP, VPN clients). - Manage…
Question
Which features does FortiAuthenticator support when acting as a certificate authority (CA)?
Options
- AIt can issue and revoke digital certificates but cannot act as an OCSP server.
- BIt can integrate with third-party certificate authorities to validate external certificates.
- CIt functions solely as a CRL repository and does not support certificate signing requests (CSR).
- DIt can act as a self-signer for issuing and revoking digital certificates.
How the community answered
(20 responses)- B10% (2)
- C5% (1)
- D85% (17)
Explanation
When FortiAuthenticator is configured to act as a Certificate Authority (CA), it can: - Act as a self-signed root CA or an intermediate CA. - Issue and revoke digital certificates for users, devices, or Fortinet components (e.g., FortiGate, FortiAP, VPN clients). - Manage Certificate Revocation Lists (CRLs) and optionally serve as an OCSP responder for real-time revocation checking.
Topics
Community Discussion
No community discussion yet for this question.