Joe a website administrator believes he owns the intellectual property for a company invention and has been replacing image files on the company's public facing website in the DMZ. Joe is using…

Question

Options

• ADigital signatures
• BFile integrity monitoring
• CAccess controls
• DChange management
• EStateful inspection firewall

• A
  11% (4)
• B
  82% (31)
• C
  5% (2)
• E
  3% (1)

Explanation

File integrity monitoring (FIM) detects unauthorized changes to files by maintaining cryptographic hashes of known-good files and alerting when those hashes change - meaning even if Joe replaces an image with a steganographically-altered version, the change is flagged immediately.

Why the distractors are wrong:

• A. Digital signatures verify authenticity and authorship but don't prevent or detect file substitution by someone who already has write access.
• C. Access controls could limit who can modify files, but the scenario states Joe is the admin - he likely already has legitimate access, so access controls wouldn't stop him.
• D. Change management is a process/policy control that requires approvals for changes; it helps governance but doesn't technically detect unauthorized file replacements after the fact.
• E. Stateful inspection firewall monitors network traffic state but has no visibility into file-level changes on a web server.

Memory tip: Think of FIM as a "tamper-evident seal" on your files - it doesn't matter who made the change or how the data is hidden inside the file; if the file changes without authorization, the alarm trips. Steganography hides data inside files, so the only reliable technical control is detecting that the file itself was altered.

No community discussion yet for this question.