2V0-41.23 · Question #42
Which two are requirements for FQDN Analysis? (Choose two.)
The correct answer is A. The NSX Edge nodes require access to the Internet to download category and reputation D. A layer 7 gateway firewall rule must be configured on the Tier-1 gateway uplink. FQDN Analysis is a feature of NSX that uses DNS snooping to identify the FQDNs that are being accessed by virtual machines on your network. FQDN Analysis then uses category and reputation definitions to classify the FQDNs and identify any potential security risks. To use FQDN…
Question
Which two are requirements for FQDN Analysis? (Choose two.)
Options
- AThe NSX Edge nodes require access to the Internet to download category and reputation
- BESXi control panel requires access to the Internet to download category and reputation
- CThe NSX Manager requires access to the Internet to download category and reputation
- DA layer 7 gateway firewall rule must be configured on the Tier-1 gateway uplink.
- EA layer 7 gateway firewall rule must be configured on the Tier-0 gateway uplink.
How the community answered
(40 responses)- A85% (34)
- B5% (2)
- C8% (3)
- E3% (1)
Explanation
FQDN Analysis is a feature of NSX that uses DNS snooping to identify the FQDNs that are being accessed by virtual machines on your network. FQDN Analysis then uses category and reputation definitions to classify the FQDNs and identify any potential security risks. To use FQDN Analysis, you need to configure a layer 7 gateway firewall rule on the Tier-1 gateway uplink. This firewall rule will allow DNS traffic to pass through the Tier-1 gateway so that FQDN Analysis can snoop on the DNS traffic and identify the FQDNs that are being accessed. The NSX Edge nodes also need access to the Internet so that they can download the category and reputation definitions that are used by FQDN Analysis.
Topics
Community Discussion
No community discussion yet for this question.