Question 770
At the Ironwood training campus, fault records from R-IRN-RT1 and R-CLR-RT2 arrive at the same syslog collector but their timestamps differ by minutes, hiding causal order. Which continuing operational control is most directly relevant to preventing this problem?
Explanation
Correct Answer
This control monitors the relevant configuration or operational behavior at the Ironwood training campus. Monitor clock synchronization and timestamp settings across infrastructure devices. It targets the condition described in the stem.
Incorrect Answers
This would manage a different failure pattern. The remote logging level filters less-severe events before they are forwarded. It is not the most direct recurring check for syslog timestamp correlation at the Ironwood training campus.
That safeguard protects against conditional debug and router load, not the concrete risk described at the Ironwood training campus. Unsynchronized device time makes otherwise collected logs unreliable for cross-device event correlation.
This is useful for another concern: Reconcile DHCP exclusions with static inventories whenever subnet assignments change. It does not continuously test syslog timestamp correlation at the Ironwood training campus.