Computer Hacking Forensic Investigator (CHFI v10) — Question 546

What do you call the process of studying the changes that have taken place across a system or a machine after a series of actions or incidents?

Answer options

• A. Windows Services Monitoring
• B. System Baselining
• C. Start-up Programs Monitoring
• D. Host integrity Monitoring

Correct answer: D

Explanation

Host integrity Monitoring is the correct answer as it involves assessing the changes in a system to ensure its integrity after incidents. The other options focus on specific aspects of system management rather than the overall examination of changes across the system.