7.3 - Perform Configuration Management (CM) (e.g., Provisioning, Baselining, Automation) CISSP Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A security team needs to manage the configuration of a large number of servers across multiple data centers. They want to automate the deployment of security patches and ensure that all servers are configured according to the organization's security baseline. Which tool category would best meet this need?

   • AA vulnerability scanner that identifies missing patches and misconfigurations.
   • BA log management tool that collects and analyzes system logs for security incidents.
   • CA network monitoring tool that tracks bandwidth usage and alerts on anomalies.
   • DA configuration management tool that supports automated provisioning, patching, and compliance enforcement.
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   How is a configuration baseline typically used in security operations?

   • ATo encrypt all data stored on a system
   • BTo compare the current state of a system against the approved configuration to detect unauthorized changes
   • CTo provide a list of all users with administrative privileges
   • DTo automatically patch all systems on a daily basis
   Reveal Solution Discussion Select an answer first
4. 23expert · hard

   A security manager is implementing a configuration management process for a critical application. The process must balance the need for strict change control with the need for rapid deployment of security patches. Which of the following approaches best achieves this balance?

   • ADeploy security patches only during scheduled maintenance windows, regardless of the severity of the vulnerability.
   • BAllow security patches to be deployed automatically, but require a post-deployment review and documentation.
   • CRequire all changes, including security patches, to go through the full change advisory board (CAB) approval process.
   • DUse a configuration management tool that automatically patches all systems without any human review.
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   In configuration management, what is the primary purpose of provisioning?

   • ATo monitor system performance and detect anomalies in real time
   • BTo establish and maintain the initial configuration of systems and services according to approved specifications
   • CTo document all changes made to a system after it has been deployed
   • DTo define security policies and access control rules for an organization
   Reveal Solution Discussion Select an answer first
6. 25expert · hard

   A security manager is reviewing the configuration management process for a critical financial application. The process currently relies on manual configuration of servers, which has led to inconsistencies and security incidents. The manager wants to implement a more robust process. Which of the following is the most important first step?

   • APurchase and deploy a configuration management tool immediately to automate the process.
   • BConduct a security audit of the current server configurations to identify gaps.
   • CHire additional IT staff to manually configure servers more carefully.
   • DDefine a security baseline for the application servers and document it in a configuration management plan.
   Reveal Solution Discussion Select an answer first