FortinetFortinet
NSE4 · Question #368
NSE4 Question #368: Real Exam Question with Answer & Explanation
Sign in or unlock NSE4 to reveal the answer and full explanation for question #368. The question stem and answer options stay visible for context.
Submitted by ravi_2018· Apr 18, 2026Security Profiles and Content Inspection
Question
Which of the following statements are true about the SSL Proxy certificate that must be used for SSL Content Inspection? (Choose two.)
Options
- AIt cannot be signed by a private CA
- BIt must have either the field "CA=True" or the filed "Key Usage=KeyCertSign"
- CIt must be installed in the FortiGate device
- DThe subject filed must contain either the FQDN, or the IP address of the FortiGate device
Unlock NSE4 to see the answer
You've previewed enough free NSE4 questions. Unlock NSE4 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#SSL Content Inspection#Certificate Management#FortiGate Proxy#Security Profiles