Secure Configuration of Enterprise Assets and Software GCCC Practice Questions (Page 11)

Questions 51–53

1. 51expert · hard

   A company is implementing a configuration management process. They have a change advisory board (CAB) that reviews all changes. However, the CAB is slowing down the deployment of critical security patches. The security team wants to maintain control while accelerating patching. Which approach best balances control and speed?

   • ACreate a pre-approved change category for security patches that meet predefined criteria, allowing them to bypass the CAB but still be logged and audited.
   • BApply security patches immediately and document them after the fact.
   • CRequire the CAB to meet daily to review all security patches.
   • DEliminate the CAB entirely and allow administrators to apply patches at their discretion.
   Reveal Solution Discussion Select an answer first
2. 52foundation · easy

   What is configuration drift?

   • AThe deletion of configuration files during system maintenance
   • BThe gradual deviation of an asset's configuration from its approved secure baseline
   • CThe process of moving configuration data to a new data center
   • DThe intentional change of a configuration baseline to meet new requirements
   Reveal Solution Discussion Select an answer first
3. 53foundation · easy

   What is the main benefit of using automated tools to enforce secure configurations?

   • AThey automatically patch all software vulnerabilities without human intervention
   • BThey eliminate the need for human oversight of security settings
   • CThey ensure configurations are applied consistently and quickly across many assets
   • DThey replace the need for vulnerability scanning
   Reveal Solution Discussion Select an answer first