An enterprise security team discovers that several Linux application servers frequently deviate from established security baselines following system maintenance. Local administrators have been making manual configuration edits directly on production instances to resolve immediate service issues, bypassing the organization's deployment pipeline. Which of the following strategies best addresses this configuration drift while ensuring all future changes adhere to baseline security standards?
- Implement an automated configuration management system using infrastructure-as-code and version control, where all approved baseline changes are deployed centrally and unauthorized local modifications are automatically overwritten.Cevap
- BDeploy network perimeter firewall rules to restrict administrative management access to local physical console connections during maintenance windows.
- CReclassify the configuration baseline rules as detective security controls within the SIEM to log unauthorized modifications without taking corrective action.
- DSuspend automated patch management updates on production servers to prevent software vendor updates from overriding local system configuration settings.
Cevap
Implement an automated configuration management system using infrastructure-as-code and version control, where all approved baseline changes are deployed centrally and unauthorized local modifications are automatically overwritten.
Centralized automated configuration management utilizing Infrastructure as Code (IaC) ensures that security baselines are consistently maintained across all enterprise servers. By committing changes to version control and running automated enforcement, any manual modifications made directly on production nodes are detected and automatically overwritten to maintain baseline integrity.
Adım Adım Çözüm
Anahtar Kavram
Configuration Drift and Automated Baseline Enforcement