7.3 - Perform Configuration Management (CM) (e.g., Provisioning, Baselining, Automation) CISSP Practice Questions (Page 6)

Questions 26–29

1. 26application · medium

   A security administrator is tasked with establishing a security baseline for a fleet of Linux servers. The baseline must be documented and used as a reference for detecting unauthorized changes. Which of the following is the most effective first step in this process?

   • ADefine a standard configuration, document it in a configuration management plan, and capture a snapshot of a known-good system.
   • BRun a vulnerability scanner against the servers to identify missing patches and configuration weaknesses.
   • CReview the system logs for any signs of unauthorized access or configuration changes.
   • DImplement a file integrity monitoring tool that alerts on any changes to critical system files.
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   How does automation support configuration management?

   • ABy replacing the need for security policies and procedures
   • BBy eliminating the need for human oversight of security operations
   • CBy enabling consistent and repeatable provisioning, monitoring, and enforcement of configurations
   • DBy automatically generating security incident reports without any input
   Reveal Solution Discussion Select an answer first
4. 28application · medium

   A security manager is implementing a configuration management process for an organization's network devices. The process must ensure that changes to device configurations are tracked, approved, and documented. Which of the following is the most critical component of this process?

   • AStatus accounting, which involves recording and reporting the status of configuration items.
   • BConfiguration control, which includes a formal change management process for approving and implementing changes.
   • CConfiguration auditing, which involves verifying that the actual configuration matches the documented baseline.
   • DConfiguration identification, which involves labeling and documenting each configuration item.
   Reveal Solution Discussion Select an answer first
5. 29application · medium

   An organization is adopting a DevOps model and wants to ensure that development, test, and production environments are configured consistently. They plan to use infrastructure as code to provision environments. Which of the following is the most important benefit of this approach for configuration management?

   • AIt eliminates the need for security audits because configurations are defined in code.
   • BIt ensures that all environments are identical by using the same code, regardless of underlying hardware.
   • CIt automatically patches all systems without the need for a separate patch management process.
   • DIt allows for rapid, repeatable provisioning of environments with consistent configurations.
   Reveal Solution Discussion Select an answer first