NSE 5 – FortiAnalyzer 6.2 — Question 18

Why should you use an NTP server on FortiAnalyzer and all registered devices that log into FortiAnalyzer?

Answer options

• A. To properly correlate logs
• B. To use real-time forwarding
• C. To resolve host names
• D. To improve DNS response times

Correct answer: A

Explanation

Using an NTP server ensures that all devices have synchronized time, which is crucial for accurately correlating logs from various sources. Without proper time synchronization, log entries may appear out of order or misaligned, complicating analysis. The other options do not relate directly to the primary function of NTP in log management.