7.3 - Perform Configuration Management (CM) (e.g., Provisioning, Baselining, Automation) CISSP Practice Questions (Page 1)

Questions 1–5

1. 1expert · hard

   An organization is implementing a configuration management process for its network devices. The process must ensure that changes are approved, documented, and that the current configuration is always known. The security team is considering using a network configuration management tool. Which of the following is the most important feature to look for in this tool?

   • AThe ability to automatically back up device configurations on a regular basis.
   • BThe ability to monitor network traffic for security incidents.
   • CThe ability to generate network topology diagrams automatically.
   • DThe ability to enforce configuration standards and detect drift from the baseline.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which of the following is an example of automation in configuration management?

   • AConducting a quarterly review of firewall rules with a team meeting
   • BUsing a script to deploy a standard server image with preconfigured security settings
   • CAsking each administrator to configure new servers according to their personal preferences
   • DManually updating a spreadsheet with the latest IP addresses of servers
   Reveal Solution Discussion Select an answer first
4. 3expert · hard

   A company is using a configuration management tool to automate the deployment of its application servers. The tool is configured to enforce the desired state, but the security team has noticed that some servers have configuration drift that is not being corrected. Which of the following is the most likely cause of this issue?

   • AThe configuration baseline is not documented in the tool.
   • BThe security team is manually changing the configuration after the tool runs.
   • CThe configuration management tool is not configured to run on a regular schedule.
   • DThe servers are not connected to the network, so the tool cannot reach them.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Which of the following is a common tool used for configuration management?

   • ANmap
   • BAnsible
   • CWireshark
   • DMetasploit
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   What is a configuration baseline in configuration management?

   • AA record of all security incidents and their resolutions
   • BA documented set of specifications for a system that serves as a reference point for future changes and audits
   • CA backup of all system data taken at a specific point in time
   • DA list of approved software vendors for an organization
   Reveal Solution Discussion Select an answer first