14674274
Descrição
Quiz por Marcos Avila, atualizado more than 1 year ago
|
Criado por Marcos Avila
mais de 5 anos atrás
|
|
Questão 1
Questão
FortiGate uses the ______ certificate standard.
Responda
-
X.509v3
-
X.509v4
-
X.509v5
Questão 2
Questão
What attribute or extension is used to identify the owner of a certificate?
Responda
-
a. The subject name in the certificate
-
b. The unique serial number in the certificate
Questão 3
Questão
How does FortiGate check to see if a certificate has been revoked?
Responda
-
a. It checks the CRL that resides on FortiGate.
-
b. It retrieves the CRL from a directory server.
Questão 4
Questão
Which one of the following is a certificate extension and value that is required in the FortiGate CA certificate in order to enable full SSL inspection?
Responda
-
a. CRL DP=ca_arl.arl
-
b. cA=True
Questão 5
Questão
For full SSL inspection, which configuration requires FortiGate to act as a CA?
Responda
-
a. Multiple clients connecting to multiple servers
-
b. Protecting the SSL server
Questão 6
Questão
Deleting a CSR that is a pending state does not impact your ability to install the certificate.
Responda
-
a. True
-
b. False
Questão 7
Questão
What is one reason why a CA would trust and accept a CSR from a FortiGate?
Responda
-
a. The CSR is signed by the FortiGate’s private key.
-
b. The CA inherently trusts all FortiGates.
Questão 8
Questão
To be compliant with the Internet Engineering Task Force (IETF) RFC 5280, the CA certificate requires these two extensions to issue certificates:
Responda
-
cA=True keyUsage=keyCertSign
-
cA=True RFC=5280
Questão 9
Questão
Untrusted SSL Certificates options: (select 3)
Responda
-
Allow
-
Block
-
Ignore
-
Log only
-
Default
-
Quarantine
Questão 10
Questão
ignore untrusted certificates is only available if Multiple Clients Connecting to Multiple _ Servers is selected
Responda
- True
- False
Questão 11
Questão
CSR
Responda
-
Certificate signing request
-
Certificate security request
Questão 12
Questão
Deleting a CSR that is a pending state does not impact your ability to install the certificate.
Responda
-
A. True
-
B. False
Questão 13
Questão
What is one reason why a CA would trust and accept a CSR from a FortiGate?
Responda
-
A. The CSR is signed by the FortiGate’s private key.
-
B. The CA inherently trusts all FortiGates.
Quer criar seus próprios Quizzes gratuitos com a GoConqr? Saiba mais.