Secure Configuration and Version Control CSSLP Practice Questions (Page 7)

Questions 31–35

1. 31expert · hard

   A company is preparing for a security audit. The auditor requires evidence that all configuration changes were authorized and that the system configurations match the approved baseline. The company has a version control system for configuration files, but not all changes are recorded there. What is the most effective way to prepare for the audit?

   • AShow the auditor the version control system's commit history, even if it is incomplete.
   • BProvide the auditor with the current configuration files and explain that they match the baseline.
   • CConsolidate all configuration changes into the version control system and generate a report that maps each change to an approved change request.
   • DAsk the system administrators to write a summary of all changes made in the past year.
   Reveal Solution Discussion Select an answer first
2. 32application · medium

   A small development team is managing a web application's source code and configuration files. They are currently using a shared folder on a network drive, which has led to accidental overwrites and no clear history of changes. The team wants to adopt a more secure and reliable method. Which approach is most beneficial?

   • AContinue using the shared folder but create a backup copy before each change.
   • BUse a file synchronization tool to keep all copies of the files up to date.
   • CEmail the files to each team member and ask them to keep local copies.
   • DImplement a version control system (e.g., Git) with branching and commit history.
   Reveal Solution Discussion Select an answer first
4. 33expert · hard

   During an incident response, the team needs to determine what configuration changes were made to a server just before a security breach. The server's configuration files are stored in a version control system, but the team is unsure if all changes were committed. What is the best course of action?

   • ARely solely on the version control system's commit history to determine what changed.
   • BAsk the system administrator to recall what changes were made.
   • CRestore the server from a backup and assume the configuration is correct.
   • DCheck the version control system's commit history and compare it with the server's current configuration to identify any uncommitted changes.
   Reveal Solution Discussion Select an answer first
5. 34application · medium

   A company is planning to refresh its server hardware. The security team needs to ensure that the new hardware meets security requirements and that the old hardware is disposed of securely. Which set of actions is most appropriate?

   • AFocus only on the performance specifications of the new hardware and store old hardware in a warehouse.
   • BDeploy the new hardware without checking security features and recycle the old hardware through a standard e-waste vendor.
   • CVerify that the new hardware supports required security features (e.g., TPM, Secure Boot) and perform secure data destruction on the old hardware.
   • DPurchase the cheapest hardware available and dispose of old hardware by donating it to a local school.
   Reveal Solution Discussion Select an answer first
6. 35foundation · easy

   During an incident response, how can configuration documentation be useful?

   • AIt automatically contains the incident
   • BIt provides a backup of the system
   • CIt helps identify what changes were made that might have contributed to the incident
   • DIt lists all potential attackers
   Reveal Solution Discussion Select an answer first