A security team notices that the same systems repeatedly appear as non-compliant in patching reports. What is the best way to address this recurring issue?

Increase the frequency of vulnerability scans for these systems.

Remove these systems from the compliance report.

Investigate the root cause of why these systems are not being patched and update the patching process accordingly.

Manually patch these systems every time they appear in the report.

An organization wants to automate the enforcement of a secure baseline on Windows workstations. They currently use Active Directory and need to ensure that any drift from the baseline is corrected automatically. Which tool and configuration approach best meets this requirement?

Use a configuration management tool that only reports drift but does not correct it.

Use a PowerShell script that runs once during initial deployment and then is deleted.

Use a manual checklist that administrators complete each month.

Use Group Policy to enforce the baseline settings and configure a scheduled task that runs gpupdate /force periodically to reapply settings.

A company wants to automate the deployment of security patches to its fleet of servers. The servers run different operating systems and applications. The team needs a solution that can handle the diversity and provide a compliance report after deployment. Which approach best meets these requirements?

Use a script that runs on each server to download and install patches, but does not report the results.

Use a configuration management tool that only deploys configuration files, not patches.

Use a centralized patch management tool that supports multiple OS families, schedules deployments, and generates compliance reports.

Use a separate manual process for each operating system and compile reports in a spreadsheet.

In the patch management process, which step directly follows the identification of available patches?

Deployment of patches to production systems

Testing patches in a non-production environment

Prioritization of patches based on risk

Verification that patches were applied successfully

GIAC Continuous Monitoring Certification

Domain 4Objective 3

Patching & Secure Baseline Configurations GMON Practice Questions (Page 8)

Part of the Configuration and Vulnerability Management domain, which makes up ~21% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~15–25 in this domain), expect 5–8 from this objective — we provide 54 practice questions to prepare you well beyond it. (estimate)

54questions here

11free pages

10concepts

Questions 36–40

36application · medium
A security team notices that the same systems repeatedly appear as non-compliant in patching reports. What is the best way to address this recurring issue?
Select an answer first
37application · medium
An organization wants to automate the enforcement of a secure baseline on Windows workstations. They currently use Active Directory and need to ensure that any drift from the baseline is corrected automatically. Which tool and configuration approach best meets this requirement?
Select an answer first
38application · medium
A company wants to automate the deployment of security patches to its fleet of servers. The servers run different operating systems and applications. The team needs a solution that can handle the diversity and provide a compliance report after deployment. Which approach best meets these requirements?
Select an answer first
39foundation · easy
In the patch management process, which step directly follows the identification of available patches?
Select an answer first
40foundation · easy
Which tool is commonly used to enforce secure baseline configurations on Windows systems?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GMON

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GMON” is a trademark of its owner, used for identification only.

Patching & Secure Baseline Configurations GMON Practice Questions (Page 8)

Questions 36–40

A security team notices that the same systems repeatedly appear as non-compliant in patching reports. What is the best way to address this recurring issue?

An organization wants to automate the enforcement of a secure baseline on Windows workstations. They currently use Active Directory and need to ensure that any drift from the baseline is corrected automatically. Which tool and configuration approach best meets this requirement?

In the patch management process, which step directly follows the identification of available patches?

Which tool is commonly used to enforce secure baseline configurations on Windows systems?

Keep studying — Configuration and Vulnerability Management