Here are all the actual test exam dumps for IT exams. Most people prepare for the actual exams with our test dumps to pass their exams. So it's critical to choose and actual test pdf to succeed.

Exam NSE4_FGT_AD-7.6 Topic 3 Question 19 Discussion

Actual exam question for Fortinet's NSE4_FGT_AD-7.6 exam
Question #: 19
Topic #: 3
An administrator configures FortiGuard servers as DNS servers on FortiGate using default settings.
What is true about the DNS connection to a FortiGuard server?

Suggested Answer: C Vote an answer

"When using FortiGuard servers for DNS, FortiOS uses DNS over TLS (DoT) by default to secure the DNS traffic. New FortiGuard DNS servers have been added as primary and secondary servers." Technical Deep Dive:
The correct answer is C. It uses DNS over TLS.
This is a direct default-behavior question. If you configure FortiGuard servers as DNS servers and do not change anything else, FortiGate uses DoT rather than plain DNS. That means the DNS session is encrypted, which protects DNS queries from simple interception or tampering on the path.
Why the other options are wrong:
A is standard clear-text DNS behavior, not the FortiGuard DNS default stated in the guide.
B is incorrect because the guide specifically says DNS over TLS, not DNS over HTTPS.
D is incorrect; the guide does not describe UDP 8888 as the default transport for this DNS use case.
Operationally, this matters because FortiGate relies on DNS not only for client-facing services, but also for resolving objects and securely reaching cloud-based services. Using DoT improves confidentiality for those DNS lookups.

by Jonathan at Jul 11, 2026, 04:28 PM

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Nick name: Submit Cancel
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.