NSE4 · Question #72
What are valid options for handling DNS requests sent directly to a FortiGates interface IP? (Choose three.)
The correct answer is B. Forward-only. C. Non-recursive. E. Recursive.. When a FortiGate receives DNS requests directly on its interface IP, it can be configured to act as a recursive DNS server, a non-recursive DNS server, or a forward-only DNS server to handle those requests.
Question
What are valid options for handling DNS requests sent directly to a FortiGates interface IP? (Choose three.)
Options
- AConditional-forward.
- BForward-only.
- CNon-recursive.
- DIterative.
- ERecursive.
How the community answered
(25 responses)- A8% (2)
- B88% (22)
- D4% (1)
Why each option
When a FortiGate receives DNS requests directly on its interface IP, it can be configured to act as a recursive DNS server, a non-recursive DNS server, or a forward-only DNS server to handle those requests.
"Conditional-forward" is a specific feature for forwarding queries for particular domains, not a general mode for handling all DNS requests sent to an interface IP.
A FortiGate configured as a forward-only DNS server directs all DNS queries it receives to specified external DNS servers, without attempting to resolve them locally.
A FortiGate acting as a non-recursive DNS server will only respond to queries if it has authoritative information or cached records, it will not query other servers for unknown answers.
"Iterative" describes a type of DNS query process where a server repeatedly queries other servers, but it is not a direct configuration option for a FortiGate's DNS handling mode for incoming requests.
A FortiGate configured as a recursive DNS server attempts to fully resolve a DNS query by querying other DNS servers (e.g., root, TLD, authoritative servers) if it doesn't have the answer in its cache or authoritative zones.
Concept tested: FortiGate DNS server modes
Source: https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/567634/dns-server
Topics
Community Discussion
No community discussion yet for this question.