Secure Configuration of Enterprise Assets and Software GCCC Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A financial institution must provide audit evidence that all database servers are configured according to the organization's security baseline. The auditors require proof that any configuration drift was detected and remediated within a specific timeframe. What should the institution implement to meet this requirement?

   • AA policy that requires DBAs to self-report any configuration changes they make.
   • BA manual quarterly review of database configurations by the DBA team.
   • CA configuration management database (CMDB) that stores the intended baseline but does not track actual settings.
   • DAutomated configuration scanning that compares current settings to the baseline, logs all deviations, and records remediation actions with timestamps.
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   An organization must provide evidence to an auditor that configuration changes are reviewed and approved. They currently use a configuration management tool that logs changes. What additional control is needed to demonstrate proper change management?

   • AImplement a change approval workflow that requires sign-off before changes are applied.
   • BIncrease the logging level of the configuration management tool to capture more details.
   • CUse a configuration drift detection tool to alert on unauthorized changes.
   • DSchedule regular backups of the configuration management database.
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   What is the primary purpose of a secure configuration baseline for enterprise assets?

   • ATo replace the need for vulnerability scanning by automatically patching all assets
   • BTo record the current configuration of every asset for forensic analysis
   • CTo enforce real-time monitoring of user activity on all enterprise assets
   • DTo provide a documented set of security settings that serve as the approved starting point for asset configuration
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   Which activity is a core component of a configuration management process?

   • APerforming daily backups of all configuration files
   • BDocumenting the reason and approval for each configuration change
   • CDeleting old configuration records to reduce storage costs
   • DAssigning a unique IP address to every asset
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A security analyst notices that several servers have had their local firewall rules modified from the approved baseline. The changes appear to have been made by an administrator who was troubleshooting an application issue. The organization wants to prevent this from happening again while still allowing necessary troubleshooting. Which control is most effective?

   • AImplement a change-management process that requires approval before any firewall rule modification and use automated enforcement to revert unauthorized changes.
   • BRemove local administrator rights from all server administrators so they cannot modify firewall rules.
   • CIncrease logging of firewall rule changes and review logs monthly.
   • DDisable the local firewall on all servers to eliminate the possibility of rule modifications.
   Reveal Solution Discussion Select an answer first