A security operations team is implementing an automated system for endpoint security baseline auditing and patch management across a hybrid enterprise environment. Which of the following operational practices should the security team deploy to maintain system stability while enforcing secure configuration baselines? (Select TWO.)
- Establish a pre-deployment testing environment to validate patch compatibility and configuration baselines before rollout.Answer
- BDeploy network-level web application firewalls to automatically rewrite local operating system configuration files on non-compliant systems.
- Implement continuous baseline drift detection to identify and remediate unauthorized system configuration changes.Answer
- DReclassify host configuration baseline auditing logs as physical security controls to meet regulatory compliance requirements.
Answer
The correct operational practices are establishing a pre-deployment testing environment to validate patch updates and configuration baselines prior to production deployment, and implementing continuous baseline drift detection to monitor and remediate unauthorized system modifications.
Establishing a pre-deployment staging environment ensures patches and baseline changes are tested for stability and compatibility prior to broad release. Implementing continuous configuration drift detection allows administrators to quickly detect and correct unauthorized deviations from established security baselines.
Step-by-Step Solution
Key Concept
Patch Staging and Configuration Drift Detection