A security engineer at a utility organization oversees a fleet of distributed industrial edge gateways. Following a vendor firmware patch rollout, a security audit reveals that multiple gateways experienced configuration drift, automatically re-enabling legacy, unencrypted management protocols that violate organizational hardening standards. The engineer must implement a solution that continuously detects non-compliant settings and automatically restores all gateways to their authorized security baseline without manual intervention. Which of the following is the BEST solution to meet these requirements?
- Deploy an automated configuration orchestration tool enforcing declarative baseline templates to continuously audit and remediate unauthorized setting changes.Cevap
- BImplement inline network intrusion prevention system signature rules to filter and drop traffic directed at the unencrypted management protocol ports.
- CSchedule weekly automated vulnerability assessment scans to generate detective reporting logs for analyst review and manual remediation.
- DReconfigure perimeter firewall access control lists to restrict gateway management access strictly to designated jump boxes.
Cevap
Deploying an automated configuration orchestration tool enforcing declarative baseline templates is the best solution because it continuously monitors for configuration drift and automatically restores system settings to the authorized security baseline without manual intervention.
Deploying an automated configuration orchestration tool using declarative baseline templates directly addresses configuration drift. It continuously audits device configurations against the golden baseline standard and automatically enforces compliance by reverting unauthorized setting changes, ensuring endpoints remain hardened without requiring manual intervention.
Adım Adım Çözüm
Anahtar Kavram
Configuration Baseline Enforcement and Automated Drift Remediation
Tahmini Süre:2m 0s