Why is time synchronization important in security monitoring?

• A. Ensures accurate timestamps for logs, enabling proper event correlation and incident timelines.
• B. Reduces network bandwidth usage.
• C. Eliminates the need for backups.
• D. Improves user authentication speed.

Answer: (A)

Accurate timestamps across all systems are essential for security monitoring because they let you correctly order and link events from different devices. When clocks drift, a log from one host may appear earlier or later than related activity on another, making it hard to tell what happened first, how actions are connected, or how an incident unfolded. Time synchronization lets your SIEM correlate events and build a reliable incident timeline, which is crucial for detection, investigation, and response. It also supports forensics and legal considerations by ensuring evidence is timestamped consistently.

The other options miss the core purpose: time synchronization doesn’t primarily reduce bandwidth, eliminate backups, or speed up authentication, and those benefits don’t directly help with coordinating events across an environment.