312-50V10 · Question #887
Log monitoring tools performing behavioral analysis have alerted several suspicious logins on a Linux server occurring during non-business hours. After further examination of all login activities, it
The correct answer is B. NTP. NTP (Network Time Protocol) is the standard protocol on Linux servers responsible for synchronizing system clocks with time servers, and its failure would cause significant clock drift.
Question
Log monitoring tools performing behavioral analysis have alerted several suspicious logins on a Linux server occurring during non-business hours. After further examination of all login activities, it is noticed that none of the logins have occurred during typical work hours. A Linux administrator who is investigating this problem realizes the system time on the Linux server is wrong by more than twelve hours. What protocol used on Linux servers to synchronize the time has stopped working?
Options
- ATime Keeper
- BNTP
- CPPP
- DOSPP
How the community answered
(31 responses)- A3% (1)
- B94% (29)
- C3% (1)
Why each option
NTP (Network Time Protocol) is the standard protocol on Linux servers responsible for synchronizing system clocks with time servers, and its failure would cause significant clock drift.
Time Keeper is not a real network time synchronization protocol used on Linux or any mainstream operating system.
NTP (Network Time Protocol) is the protocol used by Linux systems - via services such as ntpd or chrony - to synchronize the local system clock with authoritative time sources over UDP port 123. A twelve-hour clock skew is a direct symptom of NTP being stopped or misconfigured, and it also causes downstream failures in Kerberos authentication and log correlation because those protocols have strict time-tolerance windows.
PPP (Point-to-Point Protocol) is a data link layer protocol used to establish direct connections between two nodes, and has no role in time synchronization.
OSPP is not a recognized time synchronization protocol - it does not exist as a standard for clock management on Linux servers.
Concept tested: NTP time synchronization on Linux servers
Source: https://www.ntp.org/documentation/4.2.8-series/
Topics
Community Discussion
No community discussion yet for this question.