JN0-336 · Question #78
Which two statements about the DNS ALG are correct? (Choose two.)
The correct answer is B. The DNS ALG supports VPN tunnels. C. The DNS ALG performs DNS doctoring. The DNS Application Layer Gateway (ALG) is designed to manage and facilitate the successful passage of DNS traffic through a network device such as a firewall or NAT. Here are the correct statements regarding DNS ALG: The DNS ALG performs DNS doctoring. DNS doctoring is indeed…
Question
Which two statements about the DNS ALG are correct? (Choose two.)
Options
- AThe DNS ALG supports DDNS.
- BThe DNS ALG supports VPN tunnels.
- CThe DNS ALG performs DNS doctoring.
- DThe DNS ALG does not support NAT.
How the community answered
(48 responses)- A8% (4)
- B88% (42)
- D4% (2)
Explanation
The DNS Application Layer Gateway (ALG) is designed to manage and facilitate the successful passage of DNS traffic through a network device such as a firewall or NAT. Here are the correct statements regarding DNS ALG: The DNS ALG performs DNS doctoring. DNS doctoring is indeed a function of the DNS ALG where it modifies the payload of DNS responses to ensure that the information is aligned with the NAT policy. For example, it can rewrite the IP addresses in DNS responses to match the internal or external NAT'd IP address that the client should use. The DNS ALG supports VPN tunnels. DNS ALG can function across VPN tunnels by managing DNS traffic that traverses the tunnel, ensuring that the DNS queries and responses are correctly handled in environments where IP address translation occurs due to the VPN.
Topics
Community Discussion
No community discussion yet for this question.