A company is deploying a new application and wants to ensure that all servers have the same secure configuration. They also need to track any changes to the configuration for compliance purposes. Which combination of practices should they use?

Perform a security audit after deployment and fix any issues found.

Use the same installation media for all servers and do not modify settings.

Use a configuration baseline with automated enforcement and enable audit logging on configuration changes.

Create a detailed configuration document and rely on administrators to follow it.

Certified Secure Software Lifecycle Professional

Domain 7Objective 4

Store and Manage Security Data CSSLP Practice Questions (Page 6)

Part of the Secure Software Deployment, Operations, Maintenance domain, which accounts for 11% of the CSSLP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~8–13 in this domain), expect 1–1 from this objective — we provide 26 practice questions to prepare you well beyond it. (estimate)

26questions here

6free pages

4concepts

11%of the exam

Questions 26–26

26application · medium
A company is deploying a new application and wants to ensure that all servers have the same secure configuration. They also need to track any changes to the configuration for compliance purposes. Which combination of practices should they use?
Select an answer first

Finished these 1 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to CSSLP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CSSLP” is a trademark of its owner, used for identification only.

Store and Manage Security Data CSSLP Practice Questions (Page 6)

Questions 26–26

A company is deploying a new application and wants to ensure that all servers have the same secure configuration. They also need to track any changes to the configuration for compliance purposes. Which combination of practices should they use?

Keep studying — Secure Software Deployment, Operations, Maintenance