CompTIA CySA+ (CS0-003) — Question 35

An analyst is examining events in multiple systems but is having difficulty correlating data points. Which of the following is most likely the issue with the system?

Answer options

• A. Access rights
• B. Network segmentation
• C. Time synchronization
• D. Invalid playbook

Correct answer: C

Explanation

The correct answer is C, as time synchronization is crucial for correlating events across systems; if the clocks are out of sync, the timestamps on events won't align, making it hard to correlate data. Options A and B do not directly impact the ability to correlate events, while D refers to a procedural error rather than a technical synchronization issue.