What is the purpose of time synchronization in log management?

• A. To Seal Logs After 30 Days
• B. To Ensure Consistent Timestamps Across Devices For Correlation
• C. To Reduce Log Size
• D. To Prevent Data Loss

Answer: (B)

Time synchronization keeps all devices stamping events from the same reference clock, typically using NTP and UTC. This consistency is essential for correlating events across multiple systems. When clocks are in sync, you can accurately line up logs from firewalls, servers, and endpoints to reconstruct what happened and in what order. If clocks drift, events can appear out of sequence or on the wrong device, which muddles investigation and slows response. Synchronization therefore improves the accuracy of correlation, alerts, and forensic timelines. It doesn’t change log size, retention, or prevent data loss directly.