CyberCertPrepNetwork FundamentalsNetwork DevicesEASYFree question
What is the purpose of a network time server (NTP server) in an enterprise, and why is accurate time critical for security?
- A.NTP servers manage QoS for real-time traffic
- B.NTP servers synchronize device clocks across the network; accurate time ensures: log correlation works (finding the attack timeline), Kerberos auth succeeds (max 5-minute skew), TLS certificate validity is correct, and forensic investigations are reliable
- C.NTP servers route time-sensitive packets faster
- D.NTP servers provide secondary DNS for time-based records
Why B is correct
NTP (UDP 123): stratum 1 = GPS/atomic clock, stratum 2 = syncs from stratum 1, etc. In enterprise, use internal NTP servers syncing from internet time sources. Without NTP: SIEM log correlation fails (can't tell what happened first), Kerberos authentication fails (>5 min skew), TLS certificate validation breaks, and forensic timelines are unreliable.
Know someone studying for Network Fundamentals? Send them this one.