N10-009 · Question #506
A company's Chief Information Security Officer requires that servers and firewalls have accurate time stamps when creating log files so that security analysts can correlate events during incident…
The correct answer is C. NTP. NTP (Network Time Protocol) is used to synchronize the clocks of network devices, such as servers and firewalls, ensuring accurate timestamps in log files. This is essential for event correlation during security incident investigations. Syslog server collects logs but does not…
Question
A company’s Chief Information Security Officer requires that servers and firewalls have accurate time stamps when creating log files so that security analysts can correlate events during incident investigations. Which of the following should be implemented?
Options
- ASyslog server
- BSMTP
- CNTP
- DSNMP
How the community answered
(46 responses)- A2% (1)
- C96% (44)
- D2% (1)
Explanation
NTP (Network Time Protocol) is used to synchronize the clocks of network devices, such as servers and firewalls, ensuring accurate timestamps in log files. This is essential for event correlation during security incident investigations. Syslog server collects logs but does not set or sync device time. SMTP is for email transmission and unrelated to time synchronization. SNMP is used for monitoring and managing network devices, not time sync. NTP ensures accurate and consistent timestamps, which is critical for log analysis and incident
Community Discussion
No community discussion yet for this question.