What attribute or extension is used to identify the owner of a certificate?
Responda
a. The subject name in the certificate
b. The unique serial number in the certificate
Questão 3
Questão
How does FortiGate check to see if a certificate has been revoked?
Responda
a. It checks the CRL that resides on FortiGate.
b. It retrieves the CRL from a directory server.
Questão 4
Questão
Which one of the following is a certificate extension and value that is required in the FortiGate CA certificate in order to enable full SSL inspection?
Responda
a. CRL DP=ca_arl.arl
b. cA=True
Questão 5
Questão
For full SSL inspection, which configuration requires FortiGate to act as a CA?
Responda
a. Multiple clients connecting to multiple servers
b. Protecting the SSL server
Questão 6
Questão
Deleting a CSR that is a pending state does not impact your ability to install the certificate.
Responda
a. True
b. False
Questão 7
Questão
What is one reason why a CA would trust and accept a CSR from a FortiGate?
Responda
a. The CSR is signed by the FortiGate’s private key.
b. The CA inherently trusts all FortiGates.
Questão 8
Questão
To be compliant with the Internet Engineering Task Force (IETF) RFC 5280, the CA certificate requires these two extensions to issue certificates:
Responda
cA=True
keyUsage=keyCertSign
cA=True
RFC=5280
Questão 9
Questão
Untrusted SSL Certificates options: (select 3)
Responda
Allow
Block
Ignore
Log only
Default
Quarantine
Questão 10
Questão
ignore untrusted certificates is only available if Multiple Clients Connecting to Multiple _ Servers is selected
Responda
True
False
Questão 11
Questão
CSR
Responda
Certificate signing request
Certificate security request
Questão 12
Questão
Deleting a CSR that is a pending state does not impact your ability to install the certificate.
Responda
A. True
B. False
Questão 13
Questão
What is one reason why a CA would trust and accept a CSR from a FortiGate?
Responda
A. The CSR is signed by the FortiGate’s private key.
B. The CA inherently trusts all FortiGates.
Quer criar seus próprios Quizzesgratuitos com a GoConqr? Saiba mais.