Which of the following is the process of comparing cryptographic hash functions of system executables and configuration files?

The correct answer is B. File integrity auditing. File integrity auditing (also called File Integrity Monitoring, or FIM) is the security process of computing and comparing cryptographic hash values (e.g., MD5, SHA-256) of critical system files - such as executables, libraries, and configuration files - against a known-good…

Incident Response & Cyber Kill Chain

Question

Options

AShoulder surfing
BFile integrity auditing
CReconnaissance
DSpoofing

How the community answered

(23 responses)

A
4% (1)
B
91% (21)
C
4% (1)

Explanation

File integrity auditing (also called File Integrity Monitoring, or FIM) is the security process of computing and comparing cryptographic hash values (e.g., MD5, SHA-256) of critical system files - such as executables, libraries, and configuration files - against a known-good baseline. Any change in a file will produce a different hash, alerting administrators to unauthorized modifications, tampering, or malware infection. Shoulder surfing is a physical observation attack. Reconnaissance is the information-gathering phase of an attack. Spoofing involves impersonating a trusted entity. None of those involve hash comparison of system files.

Topics

#file integrity auditing#cryptographic hash#integrity verification#configuration files

Community Discussion

No community discussion yet for this question.

Full GCIH Practice