LPIC-2 System Security Practice Question
Which THREE of the following tools can be used to implement file integrity checking on a Linux system?
⚠ Common exam trap
It's easy for candidates to confuse log monitoring or network scanning tools (Logwatch, Nmap) with file integrity checkers, or overlook that `sha256sum` is a valid but lower-level tool for integrity checking, while AIDE and Tripwire are dedicated solutions.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
AIDE
AIDE (Advanced Intrusion Detection Environment) is a file integrity checking tool that creates a database of file hashes and attributes (e.g., permissions, timestamps) from a baseline scan. It then periodically compares the current state of the filesystem against this database to detect unauthorized modifications, making it a correct choice for implementing file integrity checking on a Linux system.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
AIDE
Why this is correct
Advanced Intrusion Detection Environment checks file integrity.
- ✗
Logwatch
Why it's wrong here
Logwatch analyzes system logs, does not perform file integrity checks.
- ✗
Nmap
Why it's wrong here
Nmap is a network scanning tool, not file integrity.
- ✓
Tripwire
Why this is correct
Tripwire is a well-known file integrity monitoring tool.
- ✓
sha256sum
Why this is correct
Can compute and verify SHA-256 hashes to detect changes.
Go deeper
Related to this question
About these practice questions
Courseiva writes every LPIC-2 question from scratch — 507 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This LPIC-2 practice question is part of Courseiva's free LPI certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the LPIC-2 exam.