ISC2 CISSP Exam - Topic 3 Question 50 Discussion

Actual exam question for ISC2's CISSP exam

Question #: 50
Topic #: 3

Which one of the following can be used to detect an anomaly in a system by keeping track of the state of files that do not normally change?\

ASystem logs

BAnti-spyware

CIntegrity checker

DFirewall logs

Show Suggested Answer

Suggested Answer: C

by Carissa at May 04, 2022, 12:42 PM

Limited Time Offer

25%

Off

Get Premium CISSP Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Richelle

4 months ago

Anti-spyware doesn’t really fit this question, right?

upvoted 0 times

...

Ma

4 months ago

I thought firewalls were for blocking stuff, not tracking files!

upvoted 0 times

...

Crista

4 months ago

Wait, are we sure it’s not system logs?

upvoted 0 times

...

Stephen

4 months ago

Totally agree, it tracks file changes effectively.

upvoted 0 times

...

Virgina

5 months ago

Integrity checker is the right choice!

upvoted 0 times

...

Shawnda

5 months ago

I feel like firewall logs could also be relevant, but they focus more on network traffic. I’m leaning towards C as well.

upvoted 0 times

...

Audry

5 months ago

I practiced a similar question, and I recall that integrity checkers specifically monitor files for unauthorized changes. So, C sounds right to me.

upvoted 0 times

...

Ciara

5 months ago

I think the answer might be C, the integrity checker. It seems to fit the description of tracking file states.

upvoted 0 times

...

Honey

5 months ago

I'm not entirely sure, but I remember something about system logs being useful for detecting changes. Could it be A?

upvoted 0 times

...

Matt

5 months ago

PBT file? A2i file? I have no idea what those are. I'm going to have to guess on this one.

upvoted 0 times

...

Elza

5 months ago

Hmm, I'm a bit unsure about this one. The question mentions "events that do not contain extracted fields," so I'm torn between B and C. I'll have to think this through carefully.

upvoted 0 times

...

Annita

5 months ago

Hmm, this seems like a pretty straightforward statistical analysis question. I think I'd want to run a hypothesis test to see if the difference in cost per view is statistically significant.

upvoted 0 times

...