NTP (Network Time Protocol) synchronizes clocks across network devices, ensuring accurate timestamps in logs. This is critical for correlating events across different systems during investigations. A). Syslog collects logs but relies on accurate timestamps already present. B). SMTP is an email protocol, unrelated to time synchronization. C). SNMP is for monitoring and management, not time. References (CompTIA Network+ N10-009): Domain: Network Operations - Time synchronization (NTP), log correlation, security operations.