MENU
Which one of the following can be used to detect an anomaly in a system by keeping track of the state of files that do not normally change?\
Suggested Answer: C
Get Premium CISSP Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
12 comments · newest first
RI
Richelle
11 months ago
Anti-spyware doesn’t really fit this question, right?
MA
Ma
12 months ago
I thought firewalls were for blocking stuff, not tracking files!
CR
Crista
12 months ago
Wait, are we sure it’s not system logs?
ST
Stephen
12 months ago
Totally agree, it tracks file changes effectively.
VI
Virgina
1 year ago
Integrity checker is the right choice!
SH
Shawnda
1 year ago
I feel like firewall logs could also be relevant, but they focus more on network traffic. I’m leaning towards C as well.
AU
Audry
1 year ago
I practiced a similar question, and I recall that integrity checkers specifically monitor files for unauthorized changes. So, C sounds right to me.
CI
Ciara
1 year ago
I think the answer might be C, the integrity checker. It seems to fit the description of tracking file states.
HO
Honey
1 year ago
I'm not entirely sure, but I remember something about system logs being useful for detecting changes. Could it be A?
MA
Matt
1 year ago
PBT file? A2i file? I have no idea what those are. I'm going to have to guess on this one.
EL
Elza
1 year ago
Hmm, I'm a bit unsure about this one. The question mentions "events that do not contain extracted fields," so I'm torn between B and C. I'll have to think this through carefully.
AN
Annita
1 year ago
Hmm, this seems like a pretty straightforward statistical analysis question. I think I'd want to run a hypothesis test to see if the difference in cost per view is statistically significant.