Which feature verifies the trustworthiness of NTP responses?

Which feature verifies the trustworthiness of NTP responses?

• A. Network Time Security (NTS)
• B. DNSSEC
• C. DoH
• D. PTP

Answer: (A)

Network Time Security provides authentication and integrity for NTP responses, ensuring you can trust the time data you receive. NTP by itself can be spoofed or tampered with, so a client could be led to believe an incorrect time if an attacker interferes with the messages. NTS solves this by first performing a key establishment (NTS-KE) to obtain cryptographic keys, then using those keys to protect subsequent NTP traffic with authenticated encryption and MACs. This lets the client verify that each NTP reply actually came from the trusted server and has not been altered in transit, restoring trust in the time source. DNSSEC, DoH, and PTP don’t provide this specific protection for NTP responses. DNSSEC secures DNS answers, DoH hides DNS traffic, and PTP is a separate time-sync protocol used mainly in local networks for high-precision timing. None of these verify the trustworthiness of NTP responses in the way NTS does.

Network Time Security provides authentication and integrity for NTP responses, ensuring you can trust the time data you receive. NTP by itself can be spoofed or tampered with, so a client could be led to believe an incorrect time if an attacker interferes with the messages. NTS solves this by first performing a key establishment (NTS-KE) to obtain cryptographic keys, then using those keys to protect subsequent NTP traffic with authenticated encryption and MACs. This lets the client verify that each NTP reply actually came from the trusted server and has not been altered in transit, restoring trust in the time source.

DNSSEC, DoH, and PTP don’t provide this specific protection for NTP responses. DNSSEC secures DNS answers, DoH hides DNS traffic, and PTP is a separate time-sync protocol used mainly in local networks for high-precision timing. None of these verify the trustworthiness of NTP responses in the way NTS does.