An analyst is examining events in multiple systems but is having difficulty correlating data points. Which of the following is most likely the issue with the system?
- A.Access rights
- B.Network segmentation
- C.Time synchronization
- D.Invalid playbook
comptia · CS0-003 · Q427 · multiple_choice · topic_1
An analyst is examining events in multiple systems but is having difficulty correlating data points. Which of the follo…
Explanation
Selected Answer: C
Correct
When examining events in multiple systems and having difficulty correlating data points, the most likely issue could be a lack of proper time synchronization across the systems. Time synchronization is crucial for accurate event correlation and forensic analysis, as it ensures that events are properly aligned in chronological order.
Reference: examtopics_top_comment
Practice with progress tracking
Sign in to track wrong answers, get spaced-repetition reminders, and run timed exam mode.