FCSS – Enterprise Firewall Administrator 7.6 — Question 19

You must minimize CPU and RAM use on a FortiGate firewall while also enabling essential security features, such as web filtering and application control for HTTPS traffic.
Which SSL inspection setting reduces system load while also enabling security features, such as web filtering and application control for encrypted HTTPS traffic?

Answer options

• A. Enable SSL certificate inspection mode to perform basic checks without decrypting traffic.
• B. Disable SSL inspection to preserve resources.
• C. Use deep SSL inspection to inspect encrypted HTTPS traffic.
• D. Configure SSL inspection to handle HTTPS traffic efficiently.

Correct answer: A

Explanation

The correct answer, A, allows for basic SSL certificate checks without the overhead of decrypting all traffic, thus minimizing resource usage while still enabling essential security features. Options B and D are either too resource-conserving or do not effectively enable security features. Option C, while thorough, increases system load significantly due to the full decryption of traffic.