FCSS_NST_SE-7.6 · Question #95
Refer to the exhibit, which displays the output of a real-time debug. Which statement accurately describes this output?
The correct answer is B. The server hostname was extracted either from the common name (CN) in the server certificate. The hostname="training.fortinet.com" field only appears when FortiGate learns the HTTPS hostname via SNI (in the TLS Client Hello) or by parsing the server certificate's CN-it isn't gleaned from any HTTP headers over an encrypted tunnel.
Question
Refer to the exhibit, which displays the output of a real-time debug. Which statement accurately describes this output?
Exhibit
Options
- AAccess to the requested website was allowed by web filter profile ftgd-allow.
- BThe server hostname was extracted either from the common name (CN) in the server certificate
- CThe URL requested was detected to belong to FortiGuard category ID 255.
- DThe urlfilter debug detected a category mismatch.
How the community answered
(25 responses)- A12% (3)
- B64% (16)
- C20% (5)
- D4% (1)
Explanation
The hostname="training.fortinet.com" field only appears when FortiGate learns the HTTPS hostname via SNI (in the TLS Client Hello) or by parsing the server certificate's CN-it isn't gleaned from any HTTP headers over an encrypted tunnel.
Topics
Community Discussion
No community discussion yet for this question.