Examkin

Soru

Zorluk: OrtaPatch and Configuration Management

An enterprise security analyst discovers that routine software vendor patches regularly overwrite customized security hardening settings on production Linux servers, resetting critical system configurations to insecure defaults. Which of the following patch and configuration management solutions best prevents configuration drift while ensuring ongoing security baseline compliance after patch deployment?

  1. Deploying an automated configuration management tool with scheduled enforcement playbooksCevap
  2. B
    Installing a network intrusion prevention system (NIPS) to detect unauthorized configuration changes in real time
  3. C
    Scheduling post-patch manual vulnerability assessments to review system configurations quarterly
  4. D
    Configuring file system access permissions to deny read-write access to the root service account

Cevap

Deploying an automated configuration management tool with scheduled enforcement playbooks
Automated configuration management platforms utilize infrastructure code or playbooks to continuously audit system configurations and automatically re-enforce security baselines whenever a patch or administrator alters setting parameters.

Adım Adım Çözüm

1
Analyze the technical problem
Vendor software patches overwrite local system hardening settings, creating security non-compliance and configuration drift.
Security hardening baselines must be maintained continuously without interrupting legitimate software updates.
2
Evaluate remediation strategies
Declarative automated configuration management continuously validates host configurations against defined security baselines.
Automated enforcement playbooks ensure system settings automatically revert to the baseline immediately following patch installations.

Anahtar Kavram

Configuration Baseline Enforcement and Drift Remediation
Tahmini Süre:1m 15s
Bu soruyu puanla

Konular

Patch and Configuration Management

Bu konudan daha fazla soru