Fortinet Network Security Expert 8 Written Exam NSE8_812 Question # 6 Topic 1 Discussion

Fortinet Network Security Expert 8 Written Exam NSE8_812 Question # 6 Topic 1 Discussion

NSE8_812 Exam Topic 1 Question 6 Discussion:
Question #: 6
Topic #: 1

An administrator has configured a FortiGate device to authenticate SSL VPN users using digital certificates. A FortiAuthenticator is the certificate authority (CA) and the Online Certificate Status Protocol (OCSP) server.

Part of the FortiGate configuration is shown below:

NSE8_812 Question 6

Based on this configuration, which two statements are true? (Choose two.)


A.

OCSP checks will always go to the configured FortiAuthenticator


B.

The OCSP check of the certificate can be combined with a certificate revocation list.


C.

OCSP certificate responses are never cached by the FortiGate.


D.

If the OCSP server is unreachable, authentication will succeed if the certificate matches the CA.


Get Premium NSE8_812 Questions

Contribute your Thoughts:


Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.