210-250 · Question #121
How does NTP help with monitoring?
The correct answer is B. By synchronizing the time of day allows correlation of events from different system logs. NTP (Network Time Protocol) synchronizes clocks across networked devices, which is critical for security monitoring because accurate timestamps allow administrators to correlate events across multiple system logs.
Question
How does NTP help with monitoring?
Options
- AUsing TCP allows you to view HTTP connections between servers and clients.
- BBy synchronizing the time of day allows correlation of events from different system logs.
- CTo receive system generated emails
- DTo look up IP addresses in the system using the FQDN.
How the community answered
(61 responses)- A3% (2)
- B93% (57)
- C2% (1)
- D2% (1)
Why each option
NTP (Network Time Protocol) synchronizes clocks across networked devices, which is critical for security monitoring because accurate timestamps allow administrators to correlate events across multiple system logs.
NTP uses UDP port 123, not TCP, and its function is clock synchronization - it has no role in enabling visibility into HTTP connections between clients and servers.
When all devices on a network use a consistent, synchronized time source via NTP, the timestamps in their logs align precisely. This allows security analysts and monitoring systems to correlate events across routers, firewalls, servers, and endpoints to reconstruct attack timelines or diagnose issues. Without synchronized time, log correlation becomes unreliable and forensic analysis is degraded.
System-generated email notifications are handled by mail transfer agents using SMTP, not by NTP.
FQDN-to-IP address resolution is performed by DNS (Domain Name System), not NTP.
Concept tested: NTP role in log correlation and security monitoring
Source: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/bsm/configuration/xe-16/bsm-xe-16-book/bsm-time-calendar-set.html
Topics
Community Discussion
No community discussion yet for this question.