nerdexam
Fortinet

NSE4 · Question #57

Which tasks fall under the responsibility of the SSL proxy in a typical HTTPS connection? (Choose two.)

The correct answer is A. The web client SSL handshake. B. The web server SSL handshake. In a typical HTTPS connection with an SSL proxy, the proxy is responsible for performing separate SSL handshakes with both the web client and the web server, effectively acting as an intermediary.

Submitted by khalil_dz· Apr 18, 2026Security Profiles and Content Inspection

Question

Which tasks fall under the responsibility of the SSL proxy in a typical HTTPS connection? (Choose two.)

Options

  • AThe web client SSL handshake.
  • BThe web server SSL handshake.
  • CFile buffering.
  • DCommunication with the URL filter process.

How the community answered

(40 responses)
  • A
    93% (37)
  • C
    5% (2)
  • D
    3% (1)

Why each option

In a typical HTTPS connection with an SSL proxy, the proxy is responsible for performing separate SSL handshakes with both the web client and the web server, effectively acting as an intermediary.

AThe web client SSL handshake.Correct

An SSL proxy terminates the client's SSL connection by performing the SSL handshake with the web client, allowing it to decrypt the traffic originating from the client for inspection.

BThe web server SSL handshake.Correct

After the client handshake, the SSL proxy initiates a new SSL connection to the web server, performing another SSL handshake with the server to re-encrypt traffic before sending it and decrypt responses.

CFile buffering.

While proxies might buffer data, 'File buffering' is a general networking function for data flow optimization and not a specific, core responsibility inherent to the SSL proxy's role during the handshake.

DCommunication with the URL filter process.

Communication with the URL filter process is a function of the FortiGate's security processing engine, which utilizes decrypted information from the SSL proxy, but it is not a direct task of the SSL proxy's handshake itself.

Concept tested: SSL proxy handshake process

Source: https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/993781/ssl-ssh-inspection

Topics

#SSL Proxy#HTTPS Inspection#SSL Handshake#Deep Inspection

Community Discussion

No community discussion yet for this question.

Full NSE4 Practice