Which feature allows a device with an active DNS security policy to reach internally hosted (local) applications by bypassing DNS redirection?

Local domain bypass allows a device with an active DNS security policy to resolve internal domain names directly, without sending DNS queries to the cloud-based DNS security service. This is crucial for accessing local applications and resources that are not publicly resolvable. A data policy with redirect is used to steer traffic based on various criteria, but it doesn't specifically address bypassing DNS security for local domains. DNSCrypt is a protocol for encrypting and authenticating DNS traffic, not a mechanism for bypassing DNS security for local domains. DHCP option 6 is used to provide DNS server IP addresses to clients, which is a foundational networking function but doesn't offer a bypass for DNS security policies.