nerdexam
Fortinet

NSE4 · Question #345

An administrator wants to configure a FortiGate as a DNS server. The FortiGate must use its DNS database first, and then relay all irresolvable queries to an external DNS server. Which of the…

The correct answer is B. Recursive. To configure a FortiGate as a DNS server that first uses its local database and then relays irresolvable queries to external DNS servers, the recursive DNS method must be employed.

Submitted by daniela_cl· Apr 18, 2026FortiGate Deployment and System Configuration

Question

An administrator wants to configure a FortiGate as a DNS server. The FortiGate must use its DNS database first, and then relay all irresolvable queries to an external DNS server. Which of the following DNS method must you use?

Options

  • ANon-recursive
  • BRecursive
  • CForward to primary and secondary DNS
  • DForward to system DNS

How the community answered

(21 responses)
  • B
    95% (20)
  • C
    5% (1)

Why each option

To configure a FortiGate as a DNS server that first uses its local database and then relays irresolvable queries to external DNS servers, the recursive DNS method must be employed.

ANon-recursive

A non-recursive DNS server would either provide an answer from its local records or refer the client to another server, without performing further lookups on the client's behalf.

BRecursiveCorrect

The described behavior, where the FortiGate attempts to resolve a query locally and then, if unsuccessful, forwards the query to an external DNS server for full resolution, is the definition of a recursive DNS method.

CForward to primary and secondary DNS

"Forward to primary and secondary DNS" describes *where* the queries are sent for resolution, not the overall method (recursive vs. non-recursive) of how the FortiGate handles unresolved queries after checking its local database.

DForward to system DNS

"Forward to system DNS" specifies forwarding queries to the DNS servers configured on the FortiGate's system settings, which is a destination, not the specific DNS resolution method.

Concept tested: DNS server types (recursive/non-recursive)

Source: https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/330691/dns-server-and-dns-proxy

Topics

#DNS Server Configuration#Recursive DNS#FortiGate DNS

Community Discussion

No community discussion yet for this question.

Full NSE4 Practice