WatchGuard Network Security Essentials — Question 27

You need to create an HTTP-proxy policy to a specific domain for software updates (example.com). The update site has multiple subdomains and dynamic IP addresses on a content delivery network. Which of these options is the best way to define the destination in your HTTP-proxy policy? (Select one.)

Answer options

• A. Configure a host name for update.example.com.
• B. Configure an FQDN for *.example.com.
• C. Add IP addresses that correspond to each software update server in the domain.
• D. Create an alias for all subdomains and known IP addresses for example.com.

Correct answer: B

Explanation

The correct answer is B because using an FQDN for *.example.com allows for the inclusion of all subdomains, accommodating the dynamic nature of IP addresses in a CDN. Option A is too specific and only covers one subdomain, while option C is impractical due to the frequent changes in IP addresses. Option D is also limited since it doesn't cover the dynamic aspect of CDN IPs.