Fortinet
NSE8_810 · Question #55
Click the exhibit button. A FortiGate device is configured to authenticate SSL VPN users using digital certificates. Part of the FortiGate configuration is shown in the exhibit. Which two statements…
The correct answer is B. OCSP is used to verify that the user-signed certificate has not expired. C. The authentication will fail if the user certificate does not contain the user principal name (UPN) information. Explanation/Reference:
Secure VPN Solutions (IPsec and SSL)
Question
Click the exhibit button. A FortiGate device is configured to authenticate SSL VPN users using digital certificates. Part of the FortiGate configuration is shown in the exhibit. Which two statements are true in this scenario? (Choose two.)
Exhibit
Options
- AThe authentication will fail if the OCSP server is down.
- BOCSP is used to verify that the user-signed certificate has not expired.
- CThe authentication will fail if the user certificate does not contain the user principal name (UPN) information.
- DThe authentication will fail if the user certificate does not contain the CA_Cert string in the CA field.
How the community answered
(32 responses)- A6% (2)
- B78% (25)
- D16% (5)
Explanation
Explanation/Reference:
Topics
#SSL VPN#digital certificates#OCSP#UPN
Community Discussion
No community discussion yet for this question.