7.3 - Perform Configuration Management (CM) (e.g., Provisioning, Baselining, Automation) CISSP Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   Which technology is commonly used to automate the provisioning of infrastructure resources?

   • AInfrastructure as Code (IaC)
   • BIntrusion Detection System (IDS)
   • CVirtual Private Network (VPN)
   • DPublic Key Infrastructure (PKI)
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A security team is using a configuration management tool to manage the configuration of its servers. The tool is currently configured to report on configuration drift but not to correct it. The team wants to change this so that the tool automatically corrects any drift from the baseline. Which of the following is the most appropriate action?

   • AIncrease the frequency of the tool's reporting schedule.
   • BChange the tool's mode from reporting to enforcement.
   • CManually review the reports and apply the necessary changes.
   • DUse a different tool that only reports on configuration drift.
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   An organization has a large number of virtual machines that need to be deployed with a consistent security configuration. The security team wants to reduce manual effort and ensure that any drift from the baseline is automatically corrected. Which approach best achieves this?

   • ADeploy VMs from a golden image and then rely on periodic audits to identify any configuration changes.
   • BUse a configuration management tool that can provision VMs from templates and periodically enforce the desired state.
   • CCreate a detailed runbook for administrators to follow when deploying each VM manually.
   • DUse a script that runs once at deployment to apply the baseline configuration, but do not schedule it to run again.
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   Which of the following is a phase in the configuration management process?

   • AAuthentication
   • BVirtualization
   • CEncryption
   • DIdentification
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A security administrator is evaluating tools to support configuration management for a mixed environment of Windows and Linux servers. The tool must be able to enforce the desired state on both platforms and provide a centralized reporting interface. Which of the following tools is best suited for this requirement?

   • AA network configuration tool that manages only network devices such as routers and switches.
   • BAn open-source configuration management tool like Ansible that supports both Windows and Linux.
   • CA PowerShell Desired State Configuration (DSC) tool that is used only for Windows servers.
   • DA vulnerability management tool that scans for missing patches and misconfigurations.
   Reveal Solution Discussion Select an answer first