Which of the following is MOST important to ensure that logs can be effectively correlated?

A security administrator needs to review events from different systems located worldwide.

Which of the following is MOST important to ensure that logs can be effectively correlated?
A . Logs should be synchronized to their local time zone.
B. Logs should be synchronized to a common, predefined time source.
C. Logs should contain the username of the user performing the action.
D. Logs should include the physical location of the action performed.

View Answer

Answer: A