ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 30 - FCSS_SASE_AD-23 discussion

Report
Export

An organization needs to resolve internal hostnames using its internal rather than public DNS servers for remotely connected endpoints. Which two components must be configured on FortiSASE to achieve this? (Choose two.)

A.
SSL deep inspection
Answers
A.
SSL deep inspection
B.
Split DNS rules
Answers
B.
Split DNS rules
C.
Split tunnelling destinations
Answers
C.
Split tunnelling destinations
D.
DNS filter
Answers
D.
DNS filter
Suggested answer: B, C

Explanation:

To resolve internal hostnames using internal DNS servers for remotely connected endpoints, the following two components must be configured on FortiSASE:

Split DNS Rules:

Split DNS allows the configuration of specific DNS queries to be directed to internal DNS servers instead of public DNS servers.

This ensures that internal hostnames are resolved using the organization's internal DNS infrastructure, maintaining privacy and accuracy for internal network resources.

Split Tunneling Destinations:

Split tunneling allows specific traffic (such as DNS queries for internal domains) to be routed through the VPN tunnel while other traffic is sent directly to the internet.

By configuring split tunneling destinations, you can ensure that DNS queries for internal hostnames are directed through the VPN to the internal DNS servers.

FortiOS 7.2 Administration Guide: Provides details on configuring split DNS and split tunneling for VPN clients.

FortiSASE 23.2 Documentation: Explains the implementation and configuration of split DNS and split tunneling for securely resolving internal hostnames.


asked 18/09/2024
Justin Whelan
35 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first