Servers configured to use Network Time Protocol (NTP) for timekeeping can have their logs correlated more accurately across a distributed network infrastructure.
True. Time synchronization, often achieved through protocols like NTP, is essential for accurate log correlation. This is because security event timelines must be precisely reconstructed from logs generated by various systems across an infrastructure. Without synchronized clocks, correlating these events can be challenging or impossible, leading to potential ambiguities during an incident investigation. False is incorrect because the lack of time synchronization would result in difficulties in event correlation, contrary to the assertion made in the question.
Learn More
AI Generated Content may display inaccurate information, always double-check anything important.
What is Network Time Protocol (NTP)?
Why is synchronized time important for log correlation?
What are some potential issues caused by unsynchronized clocks on a network?