Time stamps that are provided by which protocol may be corrupted to complicate event correlation?

IT Exam Items Repository › Category: CyberOps Associate › Time stamps that are provided by which protocol may be corrupted to complicate event correlation?

Time stamps that are provided by which protocol may be corrupted to complicate event correlation?

  • syslog
  • SMTP
  • NTP
  • DNS
  • HTTPS

Explanation: NTP stamps may be corrupted to complicate event correlation.

Related exam: 24.1.7 Check Your Understanding - Identify the Monitored Protocol