Fortinet Exam NSE8_812 Topic 1 Question 23 Discussion

Actual exam question for Fortinet's NSE8_812 exam

Question #: 23
Topic #: 1

SD-WAN is configured on a FortiGate. You notice that when one of the internet links has high latency the time to resolve names using DNS from FortiGate is very high.

You must ensure that the FortiGate DNS resolution times are as low as possible with the least amount of work.

What should you configure?

AConfigure local out traffic to use the outgoing interface based on SD-WAN rules with a manual defined IP associated to a loopback interface and configure an SD-WAN rule from the loopback to the DNS server.

BConfigure an SD-WAN rule to the DNS server and use the FortiGate interface IPs in the source address.

CConfigure two DNS servers and use DNS servers recommended by the two internet providers.

DConfigure local out traffic to use the outgoing interface based on SD-WAN rules with the interface IP and configure an SD-WAN rule to the DNS server.

Show Suggested Answer

Suggested Answer: C

To control multicast traffic passing through a FortiGate configured in transparent mode, you can use multicast policies. Multicast policies allow you to filter multicast traffic based on source and destination addresses, protocols, and interfaces. You can also apply security profiles to scan multicast traffic for threats and violations. References: https://docs.fortinet.com/document/fortigate/6.2.14/cookbook/968606/configuring-multicast-forwarding

by Evangelina at May 22, 2024, 01:25 AM

Limited Time Offer

25%

Off

Get Premium NSE8_812 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Sabina

14 days ago

Ah, the joys of SD-WAN and DNS. Reminds me of the time I tried to set up a DNS server on a potato. Didn't end well, let me tell you.

upvoted 0 times

...

Ozell

15 days ago

Option A is really going the extra mile. Configuring a loopback interface just for DNS? That's some next-level stuff right there.

upvoted 0 times

...

Gladys

16 days ago

Haha, I bet the guy who wrote this question is a total DNS geek. Option B looks good to me, keep it simple!

upvoted 0 times

...

Winfred

1 months ago

I'm leaning towards Option C. Using the DNS servers recommended by the providers might be a more robust solution.

upvoted 0 times

...

Alfred

1 months ago

Option D seems like the way to go. Directly configuring the SD-WAN rule to the DNS server should help minimize the latency.

upvoted 0 times

Arlen

4 days ago

A) Yes, it should prioritize the traffic to the DNS server and reduce latency.

upvoted 0 times

...

Tamra

5 days ago

B) That sounds like a good solution. It should help improve the DNS resolution times.

upvoted 0 times

...

Hector

22 days ago

A) Configure local out traffic to use the outgoing interface based on SD-WAN rules with the interface IP and configure an SD-WAN rule to the DNS server.

upvoted 0 times

...