NSE4 · Question #57
Which tasks fall under the responsibility of the SSL proxy in a typical HTTPS connection? (Choose two.)
The correct answer is A. The web client SSL handshake. B. The web server SSL handshake. In a typical HTTPS connection with an SSL proxy, the proxy is responsible for performing separate SSL handshakes with both the web client and the web server, effectively acting as an intermediary.
Question
Which tasks fall under the responsibility of the SSL proxy in a typical HTTPS connection? (Choose two.)
Options
- AThe web client SSL handshake.
- BThe web server SSL handshake.
- CFile buffering.
- DCommunication with the URL filter process.
How the community answered
(40 responses)- A93% (37)
- C5% (2)
- D3% (1)
Why each option
In a typical HTTPS connection with an SSL proxy, the proxy is responsible for performing separate SSL handshakes with both the web client and the web server, effectively acting as an intermediary.
An SSL proxy terminates the client's SSL connection by performing the SSL handshake with the web client, allowing it to decrypt the traffic originating from the client for inspection.
After the client handshake, the SSL proxy initiates a new SSL connection to the web server, performing another SSL handshake with the server to re-encrypt traffic before sending it and decrypt responses.
While proxies might buffer data, 'File buffering' is a general networking function for data flow optimization and not a specific, core responsibility inherent to the SSL proxy's role during the handshake.
Communication with the URL filter process is a function of the FortiGate's security processing engine, which utilizes decrypted information from the SSL proxy, but it is not a direct task of the SSL proxy's handshake itself.
Concept tested: SSL proxy handshake process
Source: https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/993781/ssl-ssh-inspection
Topics
Community Discussion
No community discussion yet for this question.