CompTIA Server+ SK0-005 Practice Question

The correct answer is that a Data Loss Prevention (DLP) policy has quarantined the file. The key evidence is the security log alert from the File Integrity Monitoring (FIM) system. FIM systems track changes to critical files by monitoring their cryptographic hashes. An unexpected hash change on a sensitive file, like a financial report, would trigger an alert. In a secure environment, this FIM alert can trigger an automated response from a Data Loss Prevention (DLP) system. The DLP system's response is often to quarantine the file, which makes it inaccessible to users as a protective measure against data tampering or exfiltration. The other options are less likely given the specific evidence. A domain lockout or a stopped local service would cause more widespread access issues, not an issue with a single file. While file system corruption is possible, the security log explicitly points to a security-related action, which should be the primary line of investigation.