Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

ISC2 CISSP Exam - Topic 3 Question 50 Discussion

Which one of the following can be used to detect an anomaly in a system by keeping track of the state of files that do not normally change?\
C) Integrity checker
A) System logs
B) Anti-spyware
D) Firewall logs

ISC2 CISSP Exam - Topic 3 Question 50 Discussion

Actual exam question for ISC2's CISSP exam
Question #: 50
Topic #: 3
[All CISSP Questions]

Which one of the following can be used to detect an anomaly in a system by keeping track of the state of files that do not normally change?\

Show Suggested Answer Hide Answer
Suggested Answer: C

by Carissa at May 04, 2022, 12:42 PM

Limited Time Offer

25%

Off

Get Premium CISSP Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Richelle
8 months ago
Anti-spyware doesn’t really fit this question, right?
upvoted 0 times
...
Ma
9 months ago
I thought firewalls were for blocking stuff, not tracking files!
upvoted 0 times
...
Crista
9 months ago
Wait, are we sure it’s not system logs?
upvoted 0 times
...
Stephen
9 months ago
Totally agree, it tracks file changes effectively.
upvoted 0 times
...
Virgina
9 months ago
Integrity checker is the right choice!
upvoted 0 times
...
Shawnda
9 months ago
I feel like firewall logs could also be relevant, but they focus more on network traffic. I’m leaning towards C as well.
upvoted 0 times
...
Audry
9 months ago
I practiced a similar question, and I recall that integrity checkers specifically monitor files for unauthorized changes. So, C sounds right to me.
upvoted 0 times
...
Ciara
9 months ago
I think the answer might be C, the integrity checker. It seems to fit the description of tracking file states.
upvoted 0 times
...
Honey
9 months ago
I'm not entirely sure, but I remember something about system logs being useful for detecting changes. Could it be A?
upvoted 0 times
...
Matt
9 months ago
PBT file? A2i file? I have no idea what those are. I'm going to have to guess on this one.
upvoted 0 times
...
Elza
10 months ago
Hmm, I'm a bit unsure about this one. The question mentions "events that do not contain extracted fields," so I'm torn between B and C. I'll have to think this through carefully.
upvoted 0 times
...
Annita
10 months ago
Hmm, this seems like a pretty straightforward statistical analysis question. I think I'd want to run a hypothesis test to see if the difference in cost per view is statistically significant.
upvoted 0 times
...

Save Cancel