7.3 - Perform Configuration Management (CM) (e.g., Provisioning, Baselining, Automation) CISSP Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which activity is an example of provisioning in a configuration management context?

   • AConducting a risk assessment for a new application
   • BReviewing audit logs to identify unauthorized access attempts
   • CDeploying a new virtual machine with a preconfigured operating system and security settings
   • DApplying a critical security patch to an existing server
   Reveal Solution Discussion Select an answer first
2. 7expert · hard

   A security architect is designing a configuration management solution for a hybrid cloud environment. The solution must support automated provisioning of both on-premises and cloud resources, and it must be able to enforce the same security baseline across both environments. Which of the following approaches is the most effective?

   • AUse a cloud management platform that only manages cloud resources and rely on manual processes for on-premises.
   • BUse separate configuration management tools for on-premises and cloud resources to avoid conflicts.
   • CUse a single configuration management tool that supports both on-premises and cloud providers.
   • DUse manual provisioning for on-premises resources and a configuration management tool for cloud resources.
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A company is implementing a configuration management process for its database servers. The process must ensure that any changes to the database configuration are documented and that the current state is known at all times. Which of the following is the most important activity to achieve this?

   • AConfiguration identification, which involves assigning unique identifiers to each configuration item.
   • BConfiguration control, which involves a formal process for approving and implementing changes.
   • CStatus accounting, which involves recording and reporting the status of configuration items.
   • DConfiguration auditing, which involves verifying that the actual configuration matches the documented baseline.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A company is implementing a configuration management process for its servers. The process must include a way to verify that the actual configuration of each server matches the documented baseline. Which of the following activities is most directly related to this requirement?

   • AConfiguration auditing, which involves verifying that the actual configuration matches the documented baseline.
   • BStatus accounting, which involves recording the status of configuration items.
   • CConfiguration identification, which involves labeling each configuration item.
   • DConfiguration control, which involves approving changes to the configuration.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   What is the purpose of the auditing phase in the configuration management process?

   • ATo assign ownership of configuration items to specific individuals
   • BTo verify that the actual configuration of systems matches the approved baseline
   • CTo record all changes made to configuration items
   • DTo approve or reject proposed changes to configuration items
   Reveal Solution Discussion Select an answer first