Why is time synchronization CRITICAL during forensic analysis?

The correct answer is C. To accurately correlate events across systems. Accurate timelines require synchronized clocks across endpoints, servers, and network devices to reconstruct attacker activity.

Submitted by ngozi_ng· Mar 6, 2026Forensics Processes

Question

Options

ATo reduce CPU load during imaging
BTo ensure encryption keys can be recovered
CTo accurately correlate events across systems
DTo validate antivirus signatures

How the community answered

(31 responses)

A
3% (1)
C
94% (29)
D
3% (1)

Explanation

Accurate timelines require synchronized clocks across endpoints, servers, and network devices to reconstruct attacker activity.

Topics

#Forensic principles#Time synchronization#Event correlation#Evidence integrity

Community Discussion

No community discussion yet for this question.

Full 300-215 Practice