StudyByteLearn
← Fortinet NSE 4 - FortiOS 7.6 Administrator
NSE 4 · Firewall authentication

Practice question 177 of 440 · medium

A browser needs DNS before it can open the named captive portal. Which design fits this dependency?

Choose the single best answer.

  1. A.Allow unauthenticated ALL traffic for the subnet to avoid the DNS dependency.
  2. B.Require portal authentication before permitting the DNS needed to resolve that portal.
  3. C.Use service ALL as a DNS exclusion in the identity-required rule.
  4. D.Permit narrow DNS and portal prerequisites before identity-protected traffic.
Show the answer and explanation

✓ Correct answer

  • Permit narrow DNS and portal prerequisites before identity-protected traffic.

A narrow prerequisite path permits portal resolution and authentication while protecting the remaining access. Broad unauthenticated ALL access removes that protection. Requiring the portal before its own DNS dependency creates a circular path, and ALL does not exclude DNS.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.