Watchguard Network Security Practice Test

What is the best way to define the destination in an HTTP-proxy policy for a domain with multiple subdomains and dynamic IP addresses?

1. Configure a host name for update.example.com.

2. Configure an FQDN for *.example.com.

3. Add specific IP addresses for each server in the domain.

4. Create an alias for all subdomains and known IP addresses for example.com.

The correct answer is: Configure an FQDN for *.example.com.

The best way to define the destination in an HTTP-proxy policy for a domain that includes multiple subdomains and dynamic IP addresses is to configure a Fully Qualified Domain Name (FQDN) for *.example.com. This allows the policy to capture all subdomains under the main domain (example.com), ensuring that any requests to any of those subdomains can be processed by the HTTP proxy. Using an asterisk as a wildcard effectively covers all potential subdomains, accommodating any changes or additions without needing to update the policy each time a new subdomain is introduced. This flexibility is crucial for domains with dynamic IPs, as it ensures continuity of service regardless of the underlying IP infrastructure. In contrast, other options such as configuring a host name for a single subdomain or adding specific IP addresses for each server would limit the policy's effectiveness and require continual updates as changes occur. Creating an alias for all subdomains may not cover every scenario as thoroughly as an FQDN with a wildcard, particularly in a dynamic environment. Thus, using *.example.com optimally meets the need for coverage and adaptability.