Fortinet

NSE4_FGT-6.2 · Question #74

HTTP Public Key Pinning (HPKP) can be an obstacle to implementing full SSL inspection. What solutions could help resolve this problem? (Choose two.)

The correct answer is B. Change web browsers to one that does not support HPKP. C. Exempt those web sites that use HPKP from full SSL inspection. See the full explanation below for the reasoning.

Question

HTTP Public Key Pinning (HPKP) can be an obstacle to implementing full SSL inspection. What solutions could help resolve this problem? (Choose two.)

Options

AEnable Allowed SSL Certificates for the relevant security profile.
BChange web browsers to one that does not support HPKP.
CExempt those web sites that use HPKP from full SSL inspection.
DUpload a CA certificate that is required to verify the web server (certificate) stores of users' computers.

How the community answered

(25 responses)

A
16% (4)
B
76% (19)
D
8% (2)

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion

Full NSE4_FGT-6.2 Practice