A security administrator needs to review events from different systems located worldwide.
Which of the following is MOST important to ensure that logs can be effectively correlated?
A . Logs should be synchronized to their local time zone.
B. Logs should be synchronized to a common, predefined time source.
C. Logs should contain the username of the user performing the action.
D. Logs should include the physical location of the action performed.