Quiz
Certificate Operations
Perguntas do quiz (15)
1FortiGate uses the ______ certificate standard.
- AX.509v3
- BX.509v4
- CX.509v5
2What attribute or extension is used to identify the owner of a certificate?
- Aa. The subject name in the certificate
- Bb. The unique serial number in the certificate
3How does FortiGate check to see if a certificate has been revoked?
- Aa. It checks the CRL that resides on FortiGate.
- Bb. It retrieves the CRL from a directory server.
4Which one of the following is a certificate extension and value that is required in the FortiGate CA certificate in order to enable full SSL inspection?
- Aa. CRL DP=ca_arl.arl
- Bb. cA=True
5For full SSL inspection, which configuration requires FortiGate to act as a CA?
- Aa. Multiple clients connecting to multiple servers
- Bb. Protecting the SSL server
6Deleting a CSR that is a pending state does not impact your ability to install the certificate.
- Aa. True
- Bb. False
7What is one reason why a CA would trust and accept a CSR from a FortiGate?
- Aa. The CSR is signed by the FortiGate’s private key.
- Bb. The CA inherently trusts all FortiGates.
8To be compliant with the Internet Engineering Task Force (IETF) RFC 5280, the CA certificate requires these two extensions to issue certificates:
- AcA=True
keyUsage=keyCertSign - BcA=True
RFC=5280
- AcA=True
9Untrusted SSL Certificates options: (select 3)
- AAllow
- BBlock
- CIgnore
- DLog only
- EDefault
- FQuarantine
10ignore untrusted certificates is only available if Multiple Clients Connecting to Multiple _ Servers is selected
- AVerdadeiro
- BFalso
11Which one of the following is a certificate extension and value that is required in the FortiGate CA certificate in order to enable full SSL inspection?
- AA. CRL DP=ca_arl.arl
- BB. cA=True
12For full SSL inspection, which configuration requires FortiGate to act as a CA?
- AA. Multiple clients connecting to multiple servers
- BB. Protecting the SSL server
13CSR
- ACertificate signing request
- BCertificate security request
14Deleting a CSR that is a pending state does not impact your ability to install the certificate.
- AA. True
- BB. False
15What is one reason why a CA would trust and accept a CSR from a FortiGate?
- AA. The CSR is signed by the FortiGate’s private key.
- BB. The CA inherently trusts all FortiGates.
Informações
- Descrição
- O usuário eliminou as informações de disciplina Quiz sobre Certificate Operations, criado por Usuário eliminado em 20-09-2018.
- Autor
- Usuário eliminado
- Idioma
- English
- Visualizações
- 69
- Histórico
- Criado em 20 set 2018 · atualizado em 11 abr 2019
- Etiquetas