NSE 4 – FortiGate 6.0 — Question 75

Which statements about DNS filter profiles are true? (Choose two.)

Answer options

• A. They can inspect HTTP traffic.
• B. They can redirect blocked requests to a specific portal.
• C. They can block DNS requests to known botnet command and control servers.
• D. They must be applied in firewall policies with SSL inspection enabled.

Correct answer: B, C

Explanation

Options B and C are correct because DNS filter profiles can reroute blocked requests to a specific portal and block DNS requests to known botnet command and control servers. However, option A is incorrect as DNS filters do not inspect HTTP traffic, and option D is wrong because DNS filter profiles do not require SSL inspection to be applied.