NSE 4 – FortiGate 7.0 — Question 49

A network administrator has enabled full SSL inspection and web filtering on FortiGate. When visiting any HTTPS websites, the browser reports certificate warning errors. When visiting HTTP websites, the browser does not report errors.
What is the reason for the certificate warning errors?

Answer options

• A. The browser requires a software update.
• B. FortiGate does not support full SSL inspection when web filtering is enabled.
• C. There are network connectivity issues.
• D. The CA certificate set on the SSL/SSH inspection profile has not been imported into the browser.

Correct answer: D

Explanation

The certificate warning errors occur because the browser does not recognize the CA certificate that FortiGate uses for SSL inspection. Since this certificate is not imported into the browser, it cannot validate the SSL connections. The other options are incorrect as they do not address the specific issue of the CA certificate not being recognized.