Comprehensive and Detailed Explanation From Exact Extract:
Enabling DNS resolution but not storing hostnames immediately results in:
Reduced database memory/storage used for DNS info, as hostnames aren’t stored with each flow record.
Less database space used for flows, since flow records will reference IPs rather than resolved DNS names.
Reduced SQL server reads/writes since the platform does not immediately resolve and store hostnames with every received flow, decreasing load.
DNS names will still appear in reports where resolved dynamically, so option C is incorrect.
[Reference:, , NTA Administrator Guide, “Flow storage and DNS resolution options,”, , “Disabling immediate hostname resolution and storage reduces database use and SQL operations.”, ===========, ]
Submit