FCSS_SASE_AD-24 · Question #37
Refer to the exhibit. The daily report for application usage shows an unusually high number of unknown applications by category. What are two possible explanations for this? (Choose two.)
The correct answer is A. Certificate inspection is not being used to scan application traffic. D. Deep inspection is not being used to scan traffic. The unusually high number of unknown applications by category in the daily report for application usage can be attributed to the following reasons: Certificate Inspection is not being used to scan application traffic: Without certificate inspection, encrypted traffic cannot be…
Question
Refer to the exhibit. The daily report for application usage shows an unusually high number of unknown applications by category. What are two possible explanations for this? (Choose two.)
Exhibit
Options
- ACertificate inspection is not being used to scan application traffic.
- BThe inline-CASB application control profile does not have application categories set to Monitor
- CZero trust network access (ZTNA) tags are not being used to tag the correct users.
- DDeep inspection is not being used to scan traffic.
How the community answered
(18 responses)- A72% (13)
- B17% (3)
- C11% (2)
Explanation
The unusually high number of unknown applications by category in the daily report for application usage can be attributed to the following reasons: Certificate Inspection is not being used to scan application traffic: Without certificate inspection, encrypted traffic cannot be adequately analyzed, leading to a higher number of unknown applications. Certificate inspection allows the FortiSASE to decrypt and inspect HTTPS traffic, identifying applications correctly. Deep Inspection is not being used to scan traffic: Deep inspection goes beyond basic traffic analysis, performing thorough examination of packet contents to identify applications accurately. If deep inspection is not enabled, many applications may go unrecognized and categorized as
Topics
Community Discussion
No community discussion yet for this question.
