A systems administrator wants to be notified every time an application’s configuration files are updated. Which of the following should the administrator implement to achieve the objective?
A systems administrator wants to be notified every time an application’s configuration files are updated. Which of the following should the administrator implement to achieve the objective?
File Integrity Monitoring (FIM) tracks and monitors changes to files and directories. It can detect modifications in application configuration files and generate alerts or notifications whenever changes are detected, which aligns perfectly with the objective of the systems administrator.
FIM (File Integrity Monitoring) is a system that tracks and monitors changes to files and directories. It can be configured to: Regularly calculate a checksum or hash value for critical files, including application configuration files. Compare the calculated hash value with a previously stored value. Generate alerts or notifications whenever a discrepancy is detected, indicating a potential change to the file.