CiscoCisco
300-215 · Question #125
300-215 Question #125: Real Exam Question with Answer & Explanation
The correct answer is C: To accurately correlate events across systems. Accurate timelines require synchronized clocks across endpoints, servers, and network devices to reconstruct attacker activity.
Submitted by ngozi_ng· Mar 6, 2026Forensics Processes
Question
Why is time synchronization CRITICAL during forensic analysis?
Options
- ATo reduce CPU load during imaging
- BTo ensure encryption keys can be recovered
- CTo accurately correlate events across systems
- DTo validate antivirus signatures
Explanation
Accurate timelines require synchronized clocks across endpoints, servers, and network devices to reconstruct attacker activity.
Topics
#Forensic principles#Time synchronization#Event correlation#Evidence integrity
Community Discussion
No community discussion yet for this question.