CompTIA Security+ (SY0-501) — Question 909

A security administrator has created a new group policy object that utilizes the trusted platform module to compute a hash of system files and compare the value to a known-good value. Which of the following security concepts is this an example of?

Answer options

• A. Integrity measurement
• B. Secure baseline
• C. Sandboxing
• D. Immutable systems

Correct answer: A

Explanation

The correct answer is A, Integrity measurement, as it involves verifying system files against a known good hash to ensure their integrity. The other options, such as Secure baseline, refer to a standard configuration, Sandboxing is a containment strategy for executing untrusted code, and Immutable systems pertain to systems that cannot be modified after deployment, which do not directly relate to the hash verification process described.