Examkin

Question

Difficulty: EasyPatch and Configuration Management

A security administrator needs to ensure that all newly deployed enterprise servers strictly adhere to a standardized, hardened set of initial operational settings prior to production release. Which of the following should the administrator implement to establish these standardized settings?

  1. A security configuration baseline profileAnswer
  2. B
    An inline network-level packet filtering firewall rule
  3. C
    A post-implementation detective audit log review
  4. D
    An enterprise data governance classification schedule

Answer

The administrator should implement a security configuration baseline profile, which establishes standardized, pre-approved hardening settings for newly deployed systems.
A configuration baseline profile defines a mandatory minimum standard for operating systems and applications, ensuring consistent hardening across all deployed assets.

Step-by-Step Solution

1
Identify the goal in the scenario
The requirement is to define standard, hardened security settings across all newly deployed systems.
The system lifecycle requires consistent initial configurations to prevent security weaknesses before systems enter production.
2
Evaluate potential configuration management tools
A security configuration baseline defines the standard minimum security setup (e.g., CIS benchmarks, DISA STIGs) for systems.
Baselines ensure uniformity, simplify drift monitoring, and minimize misconfigurations.

Key Concept

Security Baselines and Configuration Management
Rate this question

Topics

Patch and Configuration Management

More questions from this topic