CompTIA Network+ (N10-009) — Question 146

A network manager wants to implement a SIEM system to correlate system events. Which of the following protocols should the network manager verify?

Answer options

• A. NTP
• B. DNS
• C. LDAP
• D. DHCP

Correct answer: A

Explanation

The correct answer is A, NTP, as it is essential for time synchronization across systems, which is crucial for accurate event correlation in a SIEM. The other options, while important for various network functions, do not provide the necessary time accuracy that SIEM relies on for correlating events effectively.