050-SEPROSIEM-01 · Question #2
The DNS Resolver Service
The correct answer is D. Performs DNS lookups for the corresponding IP address. The DNS Resolver Service in RSA enVision performs DNS lookups to map IP addresses found in log events to their corresponding hostnames, enriching event data.
Question
The DNS Resolver Service
Options
- AResolves hostnames
- BStores the results in a DHCP cache.
- CQueries events for the resolving port
- DPerforms DNS lookups for the corresponding IP address
How the community answered
(23 responses)- A4% (1)
- B4% (1)
- C9% (2)
- D83% (19)
Why each option
The DNS Resolver Service in RSA enVision performs DNS lookups to map IP addresses found in log events to their corresponding hostnames, enriching event data.
This answer is incomplete and imprecise - the service's specific technical action is performing DNS lookups for IP addresses, not simply 'resolving hostnames' as a general description.
The DNS Resolver Service stores resolved results in a DNS cache, not a DHCP cache - DHCP and DNS are entirely separate protocols and services.
The DNS Resolver Service does not query events for a resolving port; it performs DNS lookups on IP addresses contained within log event data.
The DNS Resolver Service executes forward and reverse DNS lookups against IP addresses extracted from collected log events, translating them into human-readable hostnames so that analysts can more easily identify event sources during investigation and reporting within enVision.
Concept tested: RSA enVision DNS Resolver Service function
Topics
Community Discussion
No community discussion yet for this question.