CISSP · Question #664
Which one of the following can be used to detect an anomaly in a system by keeping track of the state of files that do not normally change?
The correct answer is C. Integrity checker. An integrity checker is a tool used to detect anomalies by monitoring and keeping track of the state of files that typically do not change. The integrity checker creates a baseline snapshot of file attributes (like hashes, file size, or metadata) at a given time. It…
Question
Which one of the following can be used to detect an anomaly in a system by keeping track of the state of files that do not normally change?
Options
- ASystem logs
- BAnti-spyware
- CIntegrity checker
- DFirewall logs
How the community answered
(24 responses)- A4% (1)
- C92% (22)
- D4% (1)
Explanation
An integrity checker is a tool used to detect anomalies by monitoring and keeping track of the state of files that typically do not change. The integrity checker creates a baseline snapshot of file attributes (like hashes, file size, or metadata) at a given time. It periodically checks these files to see if any of these attributes have changed unexpectedly, indicating potential tampering or unauthorized modifications.
Topics
Community Discussion
No community discussion yet for this question.