nerdexam
Fortinet

NSE4 · Question #323

View the exhibit. When a user attempts to connect to an HTTPS site, what is the expected result with this configuration?

The correct answer is B. The user is presented with certificate warnings when connecting to sites that have untrusted SSL. Based on the configuration, when a user attempts to connect to an HTTPS site with an untrusted SSL certificate, they will receive a certificate warning.

Submitted by devops_kid· Apr 18, 2026Security Profiles and Content Inspection

Question

View the exhibit. When a user attempts to connect to an HTTPS site, what is the expected result with this configuration?

Exhibit

NSE4 question #323 exhibit

Options

  • AThe user is required to authenticate before accessing sites with untrusted SSL certificates.
  • BThe user is presented with certificate warnings when connecting to sites that have untrusted SSL
  • CThe user is allowed access all sites with untrusted SSL certificates, without certificate warnings.
  • DThe user is blocked from connecting to sites that have untrusted SSL certificates (no exception

How the community answered

(53 responses)
  • A
    2% (1)
  • B
    87% (46)
  • C
    4% (2)
  • D
    8% (4)

Why each option

Based on the configuration, when a user attempts to connect to an HTTPS site with an untrusted SSL certificate, they will receive a certificate warning.

AThe user is required to authenticate before accessing sites with untrusted SSL certificates.

The action for untrusted SSL certificates is a warning, not a requirement for authentication, which is a separate security control.

BThe user is presented with certificate warnings when connecting to sites that have untrusted SSLCorrect

The "Untrusted SSL Certificate" action configured as "Warning" in the SSL inspection profile will present the user with a browser-based warning, allowing them to choose whether to proceed or not.

CThe user is allowed access all sites with untrusted SSL certificates, without certificate warnings.

The configuration is explicitly set to provide a warning, not to allow access without any notification.

DThe user is blocked from connecting to sites that have untrusted SSL certificates (no exception

The action is set to "Warning," which means the connection is not outright blocked; the user is given an option to proceed past the warning.

Concept tested: FortiGate SSL inspection untrusted certificate action

Source: https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/918459/ssl-ssh-inspection-profile-features

Topics

#SSL Inspection#Untrusted Certificates#HTTPS Traffic#Security Profiles

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full NSE4 Practice