LPI Certification / CompTIA Linux+ Practice Test

Answer - A - You should use the tripwire -init command at the shell prompt to initially build Tripwire’s database of critical system files.

Key Takeaway: Tripwire is an application that monitors the reliability of critical system files and directories by identifying changes made to them. Once it detects that a monitored file has been changed, it notifies the system administrator via e-mail. It is a very crucial tool for system administrators to keep intrusion detection in check. Once a baseline database is created, Tripwire compares the current system to the baseline and reports any modifications, additions, or deletions.