nerdexam
CompTIA

CV0-003 · Question #886

A systems administrator wants to be notified every time an application's configuration files are updated. Which of the following should the administrator implement to achieve the objective?

The correct answer is B. FIM. File Integrity Monitoring (FIM) watches specified files and directories for changes and generates alerts when modifications are detected, making it the correct tool for tracking configuration file updates.

Security

Question

A systems administrator wants to be notified every time an application's configuration files are updated. Which of the following should the administrator implement to achieve the objective?

Options

  • AZFS
  • BFIM
  • CMAC
  • DDLP

How the community answered

(43 responses)
  • A
    5% (2)
  • B
    88% (38)
  • C
    5% (2)
  • D
    2% (1)

Why each option

File Integrity Monitoring (FIM) watches specified files and directories for changes and generates alerts when modifications are detected, making it the correct tool for tracking configuration file updates.

AZFS

ZFS is a combined file system and volume manager that supports snapshots and data integrity checks, but it does not generate real-time notifications when specific files are modified.

BFIMCorrect

FIM continuously monitors the cryptographic hashes or metadata of specified files and sends an alert whenever a change is detected. It is specifically designed to notify administrators of unauthorized or unexpected file modifications, making it ideal for tracking updates to application configuration files in real time.

CMAC

MAC (Mandatory Access Control) enforces policy-based access restrictions on files and processes, but it does not monitor or alert on file content changes.

DDLP

DLP (Data Loss Prevention) detects and prevents unauthorized transmission of sensitive data outside the organization, not internal file modification events.

Concept tested: File Integrity Monitoring for configuration change alerts

Source: https://learn.microsoft.com/en-us/azure/defender-for-cloud/file-integrity-monitoring-overview

Topics

#FIM#file integrity monitoring#configuration change detection#security monitoring

Community Discussion

No community discussion yet for this question.

Full CV0-003 Practice