nerdexam
Fortinet

NSE4 · Question #153

Which of the following are valid FortiGate device interface methods for handling DNS requests? (Select all that apply.)

The correct answer is A. Forward-only B. Non-recursive C. Recursive. FortiGate devices can act as a DNS server, supporting various methods for handling DNS requests including forward-only, non-recursive, and recursive queries.

Submitted by jaden.t· Apr 18, 2026FortiGate Deployment and System Configuration

Question

Which of the following are valid FortiGate device interface methods for handling DNS requests? (Select all that apply.)

Options

  • AForward-only
  • BNon-recursive
  • CRecursive
  • DIterative
  • EConditional-forward

How the community answered

(18 responses)
  • A
    94% (17)
  • D
    6% (1)

Why each option

FortiGate devices can act as a DNS server, supporting various methods for handling DNS requests including forward-only, non-recursive, and recursive queries.

AForward-onlyCorrect

Forward-only mode means the FortiGate forwards all DNS queries to configured external DNS servers without attempting to resolve them itself.

BNon-recursiveCorrect

Non-recursive queries are handled by returning an answer from cache or authoritative zone, without querying other servers.

CRecursiveCorrect

Recursive mode allows the FortiGate to fully resolve DNS requests by querying other DNS servers until it finds the authoritative answer, then returning it to the client.

DIterative

Iterative queries are typically part of a DNS server's internal recursive process to find an answer, rather than a specific interface method configuration for clients on a FortiGate.

EConditional-forward

Conditional-forward is a DNS forwarding strategy but is not listed as a primary DNS interface method type on a FortiGate in the same category as recursive/non-recursive/forward-only.

Concept tested: FortiGate DNS server modes

Source: https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/155787/dns-server-settings

Topics

#FortiGate DNS#DNS Server#DNS Proxy#System Configuration

Community Discussion

No community discussion yet for this question.

Full NSE4 Practice