You$$ve suggested to the IT team that all systems and servers, and all network devices, have their clocks synchronized and that synchronization checked frequently. One of their team members says this is not necessary. Which of these statements would be best to support your reply?

Question $10$ Answer

a$.$

When we see a device whose clock is not in sync$,$ it$$s probably because of a spoofed Wi$-$Fi access point, but if we don$$t have the clocks synchronized by policy, we can$$t see this.

b$.$

This should be easy to do; just have every device initialization script make network time service calls.

c$.$

Clocks that aren$$t synchronized properly might indicate anomalies on that system or device, which could be a precursor of an information security incident.

d$.$

In the event we$$re investigating an anomaly or an incident, having all systems event logs using the same time standard will make them a lot easier to correlate and analyze.