NSE4 Question #72: Real Exam Question with Answer & Explanation

The correct answer is B: Forward-only.. When a FortiGate receives DNS requests directly on its interface IP, it can be configured to act as a recursive DNS server, a non-recursive DNS server, or a forward-only DNS server to handle those requests.

Submitted by suresh_in· Apr 18, 2026FortiGate Deployment and System Configuration

Question

What are valid options for handling DNS requests sent directly to a FortiGates interface IP? (Choose three.)

Options

AConditional-forward.
BForward-only.
CNon-recursive.
DIterative.
ERecursive.

Explanation

When a FortiGate receives DNS requests directly on its interface IP, it can be configured to act as a recursive DNS server, a non-recursive DNS server, or a forward-only DNS server to handle those requests.

Common mistakes.

A. "Conditional-forward" is a specific feature for forwarding queries for particular domains, not a general mode for handling all DNS requests sent to an interface IP.
D. "Iterative" describes a type of DNS query process where a server repeatedly queries other servers, but it is not a direct configuration option for a FortiGate's DNS handling mode for incoming requests.

Concept tested. FortiGate DNS server modes

Reference. https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/567634/dns-server

Topics

#DNS#DNS Server Modes#DNS Forwarding#FortiGate System Services

Community Discussion

No community discussion yet for this question.

Full NSE4 Practice Browse All NSE4 Questions