nerdexam
EC-Council

712-50 · Question #380

Simon had all his systems administrators implement hardware and software firewalls to ensure network security. They implemented IDS/IPS systems throughout the network to check for and stop any…

The correct answer is D. They could use Tripwire. Tripwire is a file integrity monitoring tool that can be used to monitor critical and essential files for changes. It creates a baseline of the file's checksum and compares it to the checksum of the file at regular intervals. If the checksums do not match, it alerts the…

Information Security Core Competencies

Question

Simon had all his systems administrators implement hardware and software firewalls to ensure network security. They implemented IDS/IPS systems throughout the network to check for and stop any unauthorized traffic that may attempt to enter. Although Simon and his administrators believed they were secure, a hacker group was able to get into the network and modify files hosted on the company's website. After searching through the firewall and server logs, no one could find how the attackers were able to get in. He decides that the entire network needs to be monitored for critical and essential file changes. This monitoring tool alerts administrators when a critical file is altered. What tool could Simon and his administrators implement to accomplish this?

Options

  • AThey need to use Nessus.
  • BThey can implement Wireshark.
  • CSnort is the best tool for their situation.
  • DThey could use Tripwire.

How the community answered

(21 responses)
  • A
    5% (1)
  • B
    5% (1)
  • C
    10% (2)
  • D
    81% (17)

Explanation

Tripwire is a file integrity monitoring tool that can be used to monitor critical and essential files for changes. It creates a baseline of the file's checksum and compares it to the checksum of the file at regular intervals. If the checksums do not match, it alerts the administrator that the file has

Topics

#file integrity monitoring#Tripwire#network security tools#log analysis

Community Discussion

No community discussion yet for this question.

Full 712-50 Practice