NSE5-FWB-AD-8-0: Fortinet NSE 5 - FortiWeb 8.0 Administrator

By Fortinet · Question Mode

QuestionQ48

VerifiedApplication delivery and additional configuration

You are securing HTTPS communication across different services with FortiWeb. Configure and validate digital certificates for different traffic and communication needs.

Match each FortiWeb certificate feature with the certificate-related task it supports.

Drag & Drop
Select the correct certificate based on the requested domain name.
Automatically issue a free, signed certificate for a new public website.
Check if a presented certificate has been revoked in real time.
Import and store SSL/TLS certificates for use in server policies.
Ensure a trusted public key is used to prevent man-in-the-middle (MITM) attacks.
Explanation

SNI enables certificate selection according to the requested hostname. Let's Encrypt issues free signed certificates for public websites, while OCSP checks revocation status. The local certificate store holds imported SSL/TLS certificates for policies. Public-key pinning validates an expected trusted key and helps mitigate MITM attacks.

Community Discussion

No comments yet. Be the first to start the discussion!