What is the best choice for an SSL Forward Untrust certificate?

A network security administrator wants to inspect HTTPS traffic from users as it egresses through a firewall to the Internet/Untrust zone from trusted network zones.

The security admin wishes to ensure that if users are presented with invalid or untrusted security

certificates, the user will see an untrusted certificate warning.

What is the best choice for an SSL Forward Untrust certificate?
A . A web server certificate signed by the organization’s PKI
B . A self-signed certificate generated on the firewall
C . A subordinate Certificate Authority certificate signed by the organization’s PKI
D . A web server certificate signed by an external Certificate Authority

View Answer

Answer: B