When using a host-based intrusion detection system, what additional feature might be available to alert the system of any changes made to files that shouldn't change?
A) file integrity monitoring (FIM)
B) file change management (FCM)
C) file access auditing (FAA)
D) file checksum watching (FCW)

Question

Quizplus · Accepted Answer

File integrity monitoring (FIM) is a feature of host-based intrusion detection systems that tracks the changes made to important system files and alerts the system if there are any alterations that could indicate a security breach. FIM can provide an early warning of malicious activity and is an important addition to any intrusion detection system. File change management (FCM) and file access auditing (FAA) are not related to detecting changes made to files that shouldn't change, and file checksum watching (FCW) is not a common feature of host-based intrusion detection systems.

When Using a Host-Based Intrusion Detection System, What Additional Feature