Which term describes the process of studying the changes that have taken place across a system or machine after a series of actions or incidents?

Which term describes the process of studying the changes that have taken place across a system or machine after a series of actions or incidents?

• A. Baselining
• B. Host integrity monitoring
• C. Netstat
• D. Strings

Answer: (B)

Monitoring the host for integrity is about keeping watch over the system to see what has changed after a sequence of actions or incidents. It involves checking critical files, configurations, and other key components against a known-good state and detecting any deviations. By continuously or regularly validating the current state, you can identify what was altered, when, and by whom, which helps in spotting tampering, malware, or policy violations and guiding incident response. Baselining is about establishing that initial reference state, which is a preparatory step rather than the ongoing study of changes after events. Netstat shows current network connections, not how the system has changed over time. Strings extracts text from binaries, which isn’t about tracking changes across the system.

Monitoring the host for integrity is about keeping watch over the system to see what has changed after a sequence of actions or incidents. It involves checking critical files, configurations, and other key components against a known-good state and detecting any deviations. By continuously or regularly validating the current state, you can identify what was altered, when, and by whom, which helps in spotting tampering, malware, or policy violations and guiding incident response.

Baselining is about establishing that initial reference state, which is a preparatory step rather than the ongoing study of changes after events. Netstat shows current network connections, not how the system has changed over time. Strings extracts text from binaries, which isn’t about tracking changes across the system.