CompTIA Security+ SY0-701 Practice Question

Implementing a file integrity monitoring solution that automatically checks the integrity of system and application software files is the correct answer because such a solution can detect changes to critical system files and software packages, alerting administrators if unauthorized modifications occur. Using automatic updates does not necessarily check for unauthorized modifications; it just updates software to the latest versions. Scanning with an antivirus checks for malware but does not validate software package integrity or unauthorized changes. Using a configuration management database is helpful for tracking changes but does not automatically monitor file integrity.