nerdexam
CompTIA

CS0-003 · Question #187

An analyst is examining events in multiple systems but is having difficulty correlating data points. Which of the following is most likely the issue with the system?

The correct answer is C. Time synchronization. Time synchronization is the process of ensuring that all systems in a network have the same accurate time, which is essential for correlating data points from different sources. If the system has an issue with time synchronization, the analyst may have difficulty matching…

Submitted by klara.se· Mar 6, 2026Security operations

Question

An analyst is examining events in multiple systems but is having difficulty correlating data points. Which of the following is most likely the issue with the system?

Options

  • AAccess rights
  • BNetwork segmentation
  • CTime synchronization
  • DInvalid playbook

How the community answered

(46 responses)
  • A
    7% (3)
  • B
    4% (2)
  • C
    87% (40)
  • D
    2% (1)

Explanation

Time synchronization is the process of ensuring that all systems in a network have the same accurate time, which is essential for correlating data points from different sources. If the system has an issue with time synchronization, the analyst may have difficulty matching events that occurred at the same time or in a specific order. Access rights, network segmentation, and invalid playbook are not directly related to the issue of correlating data points.

Topics

#Log correlation#Event management#Time synchronization#SIEM

Community Discussion

No community discussion yet for this question.

Full CS0-003 Practice