CV0-003 · Question #886
A systems administrator wants to be notified every time an application's configuration files are updated. Which of the following should the administrator implement to achieve the objective?
The correct answer is B. FIM. File Integrity Monitoring (FIM) watches specified files and directories for changes and generates alerts when modifications are detected, making it the correct tool for tracking configuration file updates.
Question
A systems administrator wants to be notified every time an application's configuration files are updated. Which of the following should the administrator implement to achieve the objective?
Options
- AZFS
- BFIM
- CMAC
- DDLP
How the community answered
(43 responses)- A5% (2)
- B88% (38)
- C5% (2)
- D2% (1)
Why each option
File Integrity Monitoring (FIM) watches specified files and directories for changes and generates alerts when modifications are detected, making it the correct tool for tracking configuration file updates.
ZFS is a combined file system and volume manager that supports snapshots and data integrity checks, but it does not generate real-time notifications when specific files are modified.
FIM continuously monitors the cryptographic hashes or metadata of specified files and sends an alert whenever a change is detected. It is specifically designed to notify administrators of unauthorized or unexpected file modifications, making it ideal for tracking updates to application configuration files in real time.
MAC (Mandatory Access Control) enforces policy-based access restrictions on files and processes, but it does not monitor or alert on file content changes.
DLP (Data Loss Prevention) detects and prevents unauthorized transmission of sensitive data outside the organization, not internal file modification events.
Concept tested: File Integrity Monitoring for configuration change alerts
Source: https://learn.microsoft.com/en-us/azure/defender-for-cloud/file-integrity-monitoring-overview
Topics
Community Discussion
No community discussion yet for this question.