nerdexam
CompTIA

SK0-004 · Question #886

A server administrator needs to validate the integrity of all system files. Which of the following methods should the administrator use?

The correct answer is A. Run a hash program to generate a checksum for all files on the system and compare it to an. File integrity validation uses cryptographic hash programs to generate checksums that can be compared against a known-good baseline to detect unauthorized changes.

Security and disaster recovery

Question

A server administrator needs to validate the integrity of all system files. Which of the following methods should the administrator use?

Options

  • ARun a hash program to generate a checksum for all files on the system and compare it to an
  • BRun an encryption program to generate a checksum for all files on the system and compare it
  • CRun an antivirus program to generate a checksum for all files on the system and compare it to
  • DRun a sniffer program to generate a checksum for all files on the system and compare it to an

How the community answered

(28 responses)
  • A
    93% (26)
  • B
    4% (1)
  • C
    4% (1)

Why each option

File integrity validation uses cryptographic hash programs to generate checksums that can be compared against a known-good baseline to detect unauthorized changes.

ARun a hash program to generate a checksum for all files on the system and compare it to anCorrect

A hash program using an algorithm such as SHA-256 or MD5 generates a unique fixed-length fingerprint for every file; even a single changed byte produces a completely different hash, making any tampering or corruption immediately detectable when compared to a stored baseline. This is the standard, purpose-built method for validating file integrity. The comparison against a previously recorded checksum confirms that files have not been altered since the baseline was captured.

BRun an encryption program to generate a checksum for all files on the system and compare it

Encryption programs are designed to protect data confidentiality, not to generate integrity checksums or detect unauthorized file modifications.

CRun an antivirus program to generate a checksum for all files on the system and compare it to

Antivirus programs match files against known malware signatures and heuristics; they do not generate or compare cryptographic checksums for all system files.

DRun a sniffer program to generate a checksum for all files on the system and compare it to an

A sniffer captures and analyzes network packets in transit and has no ability to inspect or validate the integrity of files stored on a local filesystem.

Concept tested: File integrity validation using cryptographic hash checksums

Source: https://csrc.nist.gov/publications/detail/sp/800-123/final

Topics

#file integrity#checksum#hash verification#system security

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full SK0-004 Practice