PCI SSCPCI DSSMonitoring TestingEASYFree question
What does File Integrity Monitoring (FIM) detect?
- A.Password changes
- B.Malware infections, which users may disable at will provided the outage is shorter than one business day
- C.Network intrusions, which Requirement 11.5.1 places at the perimeter of the CDE and at critical points inside it to detect or prevent intrusions in real time
- D.Unauthorized changes to critical system files, configuration files, and content files
Why D is correct
FIM detects unauthorized modifications to critical files by comparing current states against known good baselines, alerting on unexpected changes.
Know someone studying for PCI DSS? Send them this one.