CompTIA Security+ (SY0-701) — Question 65

A security administrator needs a method to secure data in an environment that includes some form of checks so track any changes. Which of the following should the administrator set up to achieve this goal?

Answer options

• A. SPF
• B. GPO
• C. NAC
• D. FIM

Correct answer: D

Explanation

The correct answer is D, FIM (File Integrity Monitoring), as it specifically monitors and detects changes to files, ensuring data integrity. SPF (Sender Policy Framework) is used for email validation, GPO (Group Policy Object) manages user and computer settings in Active Directory, and NAC (Network Access Control) focuses on controlling device access to networks, none of which provide the required change tracking for data security.