Study. uk . com
  1. Home
  2. All questions
  3. Question 441

CISSP study material · question 441 of 500

An archive of log files must be shown to be unaltered months later. Which mechanism does NIST SP 800-92 describe, and what must be done with its output?

  1. An encrypted copy of each file held on the same volume for comparison.
  2. A rotation script that reprocesses each file weekly and compares sizes.
  3. A digital certificate issued per file, with the certificates stored alongside the archive.
  4. A message digest computed per file, with the digests themselves protected, for instance by storage on read-only media.
Show the answer

Answer: D. A message digest computed per file, with the digests themselves protected, for instance by storage on read-only media.

Integrity checking computes a message digest per file and stores it securely, so any change shows; the digests themselves must be protected from alteration.

Source: NIST SP 800-92 (NIST) — SP 800-92 > 3.2 Functions

Challenge yourself on this topic → Study as cards