Exam N10-009 Topic 6 Question 247 Discussion

Actual exam question for CompTIA's N10-009 exam
Question #: 247
Topic #: 6
A network manager wants to implement a SIEM system to correlate system events. Which of the following protocols should the network manager verify?

Suggested Answer: A Vote an answer

Role of NTP (Network Time Protocol):
NTP is used to synchronize the clocks of network devices to a reference time source. Accurate time synchronization is critical for correlating events and logs from different systems.
Importance for SIEM Systems:
Event Correlation: SIEM (Security Information and Event Management) systems collect and analyze log data from various sources. Accurate timestamps are essential for correlating events across multiple systems.
Time Consistency: Without synchronized time, it is challenging to piece together the sequence of events during an incident, making forensic analysis difficult.

by Mona at May 16, 2025, 04:42 AM

Limited Time Offer

15%

Off

Get Premium N10-009 Questions as Interactive Self Test Engine or PDF

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Nick name: Submit Cancel
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
0
0
0
10