NSE4_FGT-7.0 · Question #105
Which statements about DNS filter profiles are true? (Choose two.)
The correct answer is B. They can redirect blocked requests to a specific portal. C. They can block DNS requests to known botnet command and control servers. DNS filter profiles enable redirection of blocked requests to a specific portal and are effective at blocking DNS queries for known botnet command and control servers.
Question
Which statements about DNS filter profiles are true? (Choose two.)
Options
- AThey can inspect HTTP traffic.
- BThey can redirect blocked requests to a specific portal.
- CThey can block DNS requests to known botnet command and control servers.
- DThey must be applied in firewall policies with SSL inspection enabled.
How the community answered
(34 responses)- A3% (1)
- B91% (31)
- D6% (2)
Why each option
DNS filter profiles enable redirection of blocked requests to a specific portal and are effective at blocking DNS queries for known botnet command and control servers.
DNS filters operate at the DNS layer (Layer 3/4), inspecting and filtering DNS queries and responses; they do not inspect HTTP traffic, which operates at the application layer (Layer 7).
DNS filter profiles allow administrators to configure a redirect portal, so when a DNS request is blocked based on the filter rules, the client is redirected to a custom webpage instead of receiving a DNS resolution failure.
A core function of DNS filters is to block access to known malicious domains, including those associated with botnet command and control (C2) servers, by preventing their resolution.
DNS filters operate on DNS traffic itself and do not require SSL inspection to be enabled in firewall policies, as SSL inspection applies to encrypted HTTP/HTTPS traffic.
Concept tested: DNS filter profile capabilities
Source: https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/52011/dns-filter
Topics
Community Discussion
No community discussion yet for this question.