View all questions & answers for the FCP - FortiAuthenticator 6.5 Administrator Exam Materials exam


Question 12 Discussion

Which two types of digital certificates can you create in FortiAuthenticator? (Choose two answers)

  • A. Third-party root certificate
  • B. User certificate
  • C. Organization validation certificate
  • D. Local services certificate
Correct Answer: B,D

Brave-Dump Clients Votes

BD 100%

Comments



Juan Diego Ruiz 2025-04-15 22:29:24

Selected Answers: B, D


A CA can generate many different types of certificates, each with different functions (and sometimes,
confusingly, with different names). A few common certificate types include:
• CA certificates (also called root or authority certificates): These certificates identify the CA and create the
root of a CA hierarchy. As such, the certificate details have the same input for both the Issuer and Subject
fields. These certificates are self-signed and contain the CA’s public key needed to decrypt signatures in
the signed certificates.
• Web server certificates (also called local service certificates): These certificates identify web servers and
are used to secure communication to and from web servers, such as an SSH server, HTTPS website, web
portals, or EAP 802.1X authentication servers. The certificate details have the DNS name of the server in
the subject field. The public key of the web server is included.
• User certificates (also called client certificates): These certificates identify one person to another, a
person to a device or gateway, or one device to another device. The certificate includes the public key
associated with the identity.
Both user and web server certificates fall under the category of end-entity certificates.