Fortinet
NSE8_812 · Question #70
A FortiGate device is configured to authenticate SSL VPN users using digital certificates. A partial FortiGate configuration is shown in the exhibit. Referring to the exhibit, which two statements…
The correct answer is A. The authentication will fail if the user certificate does not contain the user principal name (UPN) information. C. The authentication will fail if the OCSP server is down. See the full explanation below for the reasoning.
Question
A FortiGate device is configured to authenticate SSL VPN users using digital certificates. A partial FortiGate configuration is shown in the exhibit. Referring to the exhibit, which two statements about this configuration are true? (Choose two.)
Options
- AThe authentication will fail if the user certificate does not contain the user principal name (UPN) information.
- BThe authentication will fail if the user certificate does not contain the CA_Cert string in the CA field.
- CThe authentication will fail if the OCSP server is down.
- DOCSP is used to verify that the user-signed certificate has not expired.
How the community answered
(17 responses)- A76% (13)
- B18% (3)
- D6% (1)
Community Discussion
No community discussion yet for this question.