CompTIA Security+ (SY0-601) — Question 425

A security administrator needs a method to secure data in an environment that includes some form of checks so that the administrator can track any changes. Which of the following should the administrator set up to achieve this goal?

Answer options

• A. SPF
• B. GPO
• C. NAC
• D. FIM

Correct answer: D

Explanation

The correct answer is D, FIM (File Integrity Monitoring), as it is specifically designed to monitor and track changes to files, ensuring data integrity. Options A (SPF), B (GPO), and C (NAC) do not provide mechanisms for tracking changes to data and are focused on different aspects of security and policy management.