Why is time synchronization important for TA operations, and which standard is commonly used?

• A. Allows faster data transfer; FTP is commonly used.
• B. Ensures consistent timestamps for logs and evidence; NTP is commonly used.
• C. Helps with user authentication; OAuth is commonly used.
• D. Enables data compression; GZIP is used.

Answer: (A)

Time synchronization is essential because it keeps all system clocks aligned so logs, events, and evidence carry the same timestamps. This consistency is crucial for accurately sequencing activities, correlating data from different devices, and maintaining the integrity of the investigation and chain of custody. The standard commonly used for this purpose is the Network Time Protocol (NTP), which synchronizes clocks across devices over the network and keeps them in agreement within tight tolerances. The other options don’t fit because they address data transfer speed (FTP), authentication (OAuth), or data compression (GZIP), none of which ensure synchronized timing for logs and evidence.