N10-009 · Question #16
A network manager wants to implement a SIEM system to correlate system events. Which of the following protocols should the network manager verify?
The correct answer is A. NTP. Role of NTP (Network Time Protocol): NTP is used to synchronize the clocks of network devices to a reference time source. Accurate time synchronization is critical for correlating events and logs from different systems. Importance for SIEM Systems: Event Correlation: SIEM…
Question
A network manager wants to implement a SIEM system to correlate system events. Which of the following protocols should the network manager verify?
Options
- ANTP
- BDNS
- CLDAP
- DDHCP
How the community answered
(36 responses)- A92% (33)
- C3% (1)
- D6% (2)
Explanation
Role of NTP (Network Time Protocol): NTP is used to synchronize the clocks of network devices to a reference time source. Accurate time synchronization is critical for correlating events and logs from different systems. Importance for SIEM Systems: Event Correlation: SIEM (Security Information and Event Management) systems collect and analyze log data from various sources. Accurate timestamps are essential for correlating events across multiple systems. Time Consistency: Without synchronized time, it is challenging to piece together the sequence of events during an incident, making forensic analysis difficult.
Community Discussion
No community discussion yet for this question.