NSE 4 – FortiGate 6.2 — Question 119

Which two statements about DNS filter profiles are true? (Choose two.)

Answer options

• A. They can block DNS requests to known botnet command and control servers
• B. They can inspect HTTP traffic.
• C. They must be applied in firewall policies with SSL inspection enabled
• D. They can redirect blocked requests to a specific portal

Correct answer: A, D

Explanation

Option A is correct because DNS filter profiles are specifically designed to prevent access to known botnet servers. Option D is also correct as these profiles can redirect users to a designated portal when requests are blocked. Options B and C are incorrect because DNS filter profiles do not inspect HTTP traffic and are not required to be used with SSL inspection in firewall policies.