nerdexam
Fortinet

NSE4 · Question #72

What are valid options for handling DNS requests sent directly to a FortiGates interface IP? (Choose three.)

The correct answer is B. Forward-only. C. Non-recursive. E. Recursive.. When a FortiGate receives DNS requests directly on its interface IP, it can be configured to act as a recursive DNS server, a non-recursive DNS server, or a forward-only DNS server to handle those requests.

Submitted by suresh_in· Apr 18, 2026FortiGate Deployment and System Configuration

Question

What are valid options for handling DNS requests sent directly to a FortiGates interface IP? (Choose three.)

Options

  • AConditional-forward.
  • BForward-only.
  • CNon-recursive.
  • DIterative.
  • ERecursive.

How the community answered

(25 responses)
  • A
    8% (2)
  • B
    88% (22)
  • D
    4% (1)

Why each option

When a FortiGate receives DNS requests directly on its interface IP, it can be configured to act as a recursive DNS server, a non-recursive DNS server, or a forward-only DNS server to handle those requests.

AConditional-forward.

"Conditional-forward" is a specific feature for forwarding queries for particular domains, not a general mode for handling all DNS requests sent to an interface IP.

BForward-only.Correct

A FortiGate configured as a forward-only DNS server directs all DNS queries it receives to specified external DNS servers, without attempting to resolve them locally.

CNon-recursive.Correct

A FortiGate acting as a non-recursive DNS server will only respond to queries if it has authoritative information or cached records, it will not query other servers for unknown answers.

DIterative.

"Iterative" describes a type of DNS query process where a server repeatedly queries other servers, but it is not a direct configuration option for a FortiGate's DNS handling mode for incoming requests.

ERecursive.Correct

A FortiGate configured as a recursive DNS server attempts to fully resolve a DNS query by querying other DNS servers (e.g., root, TLD, authoritative servers) if it doesn't have the answer in its cache or authoritative zones.

Concept tested: FortiGate DNS server modes

Source: https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/567634/dns-server

Topics

#DNS#DNS Server Modes#DNS Forwarding#FortiGate System Services

Community Discussion

No community discussion yet for this question.

Full NSE4 Practice