Which three pieces of information does FortiGate use to identify the hostname of the SSL server when SSL certificate inspection is enabled? (Choose three.)

The correct answer is A. The subject field in the server certificate C. The server name indication (SNI) extension in the client hello message D. The subject alternative name (SAN) field in the server certificate. https://checkthefirewall.com/blogs/fortinet/ssl-inspection

Security Profiles

Question

Options

AThe subject field in the server certificate
BThe serial number in the server certificate
CThe server name indication (SNI) extension in the client hello message
DThe subject alternative name (SAN) field in the server certificate
EThe host field in the HTTP header

How the community answered

(62 responses)

A
71% (44)
B
10% (6)
E
19% (12)

Explanation

https://checkthefirewall.com/blogs/fortinet/ssl-inspection

Topics

#SSL inspection#SNI#SAN#certificate hostname

Community Discussion

No community discussion yet for this question.

Full NSE4_FGT-6.4 Practice