What is the purpose of a change-detection mechanism in this context?

What is the purpose of a change-detection mechanism in this context?

• A. Alert about unauthorized modification of critical files
• B. Encrypt files
• C. Archive logs only
• D. Schedule backups

Answer: (A)

Change-detection mechanisms monitor critical files for unauthorized modifications and generate alerts when changes are detected, helping maintain system integrity by catching tampering early. In PCI DSS, they support the requirement to deploy change-detection capabilities that alert on modifications to critical files and configurations, enabling rapid investigation and remediation of potential compromises. They typically work by tracking a known good baseline and identifying deviations through file integrity checks, checksums, or signature comparisons on important system binaries, configuration files, and security policy files. The other options address different goals: encryption protects confidentiality, not changes; archiving logs preserves history but doesn’t provide real-time alerts; scheduling backups focuses on availability and recoverability, not detection of modifications.

Change-detection mechanisms monitor critical files for unauthorized modifications and generate alerts when changes are detected, helping maintain system integrity by catching tampering early. In PCI DSS, they support the requirement to deploy change-detection capabilities that alert on modifications to critical files and configurations, enabling rapid investigation and remediation of potential compromises. They typically work by tracking a known good baseline and identifying deviations through file integrity checks, checksums, or signature comparisons on important system binaries, configuration files, and security policy files. The other options address different goals: encryption protects confidentiality, not changes; archiving logs preserves history but doesn’t provide real-time alerts; scheduling backups focuses on availability and recoverability, not detection of modifications.