Quiz
Certificate Operations
Fragen in diesem Quiz (15)
1FortiGate uses the ______ certificate standard.
- AX.509v3
- BX.509v4
- CX.509v5
2What attribute or extension is used to identify the owner of a certificate?
- Aa. The subject name in the certificate
- Bb. The unique serial number in the certificate
3How does FortiGate check to see if a certificate has been revoked?
- Aa. It checks the CRL that resides on FortiGate.
- Bb. It retrieves the CRL from a directory server.
4Which one of the following is a certificate extension and value that is required in the FortiGate CA certificate in order to enable full SSL inspection?
- Aa. CRL DP=ca_arl.arl
- Bb. cA=True
5For full SSL inspection, which configuration requires FortiGate to act as a CA?
- Aa. Multiple clients connecting to multiple servers
- Bb. Protecting the SSL server
6Deleting a CSR that is a pending state does not impact your ability to install the certificate.
- Aa. True
- Bb. False
7What is one reason why a CA would trust and accept a CSR from a FortiGate?
- Aa. The CSR is signed by the FortiGate’s private key.
- Bb. The CA inherently trusts all FortiGates.
8To be compliant with the Internet Engineering Task Force (IETF) RFC 5280, the CA certificate requires these two extensions to issue certificates:
- AcA=True
keyUsage=keyCertSign - BcA=True
RFC=5280
- AcA=True
9Untrusted SSL Certificates options: (select 3)
- AAllow
- BBlock
- CIgnore
- DLog only
- EDefault
- FQuarantine
10ignore untrusted certificates is only available if Multiple Clients Connecting to Multiple _ Servers is selected
- ARichtig
- BFalsch
11Which one of the following is a certificate extension and value that is required in the FortiGate CA certificate in order to enable full SSL inspection?
- AA. CRL DP=ca_arl.arl
- BB. cA=True
12For full SSL inspection, which configuration requires FortiGate to act as a CA?
- AA. Multiple clients connecting to multiple servers
- BB. Protecting the SSL server
13CSR
- ACertificate signing request
- BCertificate security request
14Deleting a CSR that is a pending state does not impact your ability to install the certificate.
- AA. True
- BB. False
15What is one reason why a CA would trust and accept a CSR from a FortiGate?
- AA. The CSR is signed by the FortiGate’s private key.
- BB. The CA inherently trusts all FortiGates.
Informationen
- Beschreibung
- Der Nutzer hat seine Fachbereichs-Information gelöscht. Quiz am Certificate Operations, erstellt von Gelöschter Nutzer am 20/09/2018.
- Autor
- Gelöschter Nutzer
- Sprache
- English
- Aufrufe
- 69
- Verlauf
- Erstellt am 20 Sep 2018 · aktualisiert am 11 Apr 2019
- Schlagwörter