NSE 5 – FortiAnalyzer 5.4 — Question 23

In FortiAnalyzer's FortiView, source and destination IP addresses from FortiGate devices are not resolving to a hostname. How can you resolve the source and destination IPs, without introducing any additional performance impact to FortiAnalyzer?

Answer options

• A. Configure # set resolve-ip enable in the system FortiView settings
• B. Resolve IPs on FortiGate
• C. Configure local DNS servers on FortiAnalyzer
• D. Resolve IPs on a per-ADOM basis to reduce delay on FortiView while IPs resolve

Correct answer: A

Explanation

The correct answer is A because enabling IP resolution in the FortiView settings allows FortiAnalyzer to resolve IPs without significant performance impact. Option B suggests resolving IPs on FortiGate, which does not directly address the issue in FortiAnalyzer. Option C introduces additional latency by relying on external DNS servers, and option D, while reducing delay, still does not match the simplicity and effectiveness of enabling IP resolution directly in FortiView.