PCI SSCPCI DSSMonitoring TestingEASYFree question
What is file integrity monitoring (FIM) under PCI DSS?
- A.A scanning process that checks external IP addresses for open ports, weak protocols, and expired certificates reported to the entity
- B.A review process that compares firewall rule sets against the approved configuration standard, flagging unused rules and rule conflicts
- C.A testing technique that submits crafted input to payment applications, watching for injection flaws and cross-site scripting errors
- D.A mechanism that detects unauthorized changes to critical system files, configuration files, and content files by comparing current file states against known baselines
Why D is correct
FIM software monitors critical files for unauthorized modifications by comparing current file attributes against established baselines, alerting when changes occur that could indicate a compromise.
Know someone studying for PCI DSS? Send them this one.