Certified Ethical Hacker (CEH) — Question 94

Which of the following techniques will identify if computer files have been changed?

Answer options

• A. Network sniffing
• B. Permission sets
• C. Integrity checking hashes
• D. Firewall alerts

Correct answer: C

Explanation

Integrity checking hashes are specifically designed to verify the authenticity of files by comparing hash values before and after changes. Network sniffing, permission sets, and firewall alerts do not directly assess file modification, making them unsuitable for this purpose.