Free Preparation Discussions
MENU
Fortinet Exam NSE8_812 Topic 4 Question 37 Discussion
Topic #: 4
Refer to the exhibit.
Given the exhibit, which two statements about FortiGate FGSP HA cluster behavior are correct? (Choose two.)
Bis correct because the OCSP check of the certificate can be combined with a certificate revocation list (CRL). This means that the FortiGate will check the OCSP server to see if the certificate has been revoked, and it will also check the CRL to see if the certificate has been revoked.
Dis correct because if the OCSP server is unreachable, authentication will succeed if the certificate matches the CA. This is because the FortiGate will fall back to using the CRL if the OCSP server is unreachable.
The other options are incorrect. Option A is incorrect because OCSP checks can go to other OCSP servers, not just the FortiAuthenticator. Option C is incorrect because OCSP certificate responses can be cached by the FortiGate.
References:
Configuring SSL VPN authentication using digital certificates | FortiGate / FortiOS 7.2.0 - Fortinet Document Library
Online Certificate Status Protocol (OCSP) | FortiGate / FortiOS 7.2.0 - Fortinet Document Library
Certificate Revocation Lists (CRLs) | FortiGate / FortiOS 7.2.0 - Fortinet Document Library
Hector
1 months agoFelicitas
11 days agoLoren
13 days agoMerissa
23 days agoTracey
2 months agoLorrie
22 days agoLanie
23 days agoGeorgiann
1 months agoMaryann
2 months agoChana
2 months agoJaney
1 months agoRyan
1 months agoHolley
1 months agoLenna
2 months agoShad
2 months agoHeidy
28 days agoAnglea
1 months agoParis
2 months agoMatthew
2 months agoKristine
2 months ago