Soru

Zorluk: KolayPatch and Configuration Management

A security administrator needs to ensure that all newly deployed enterprise servers strictly adhere to a standardized, hardened set of initial operational settings prior to production release. Which of the following should the administrator implement to establish these standardized settings?

  1. A security configuration baseline profileCevap
  2. B
    An inline network-level packet filtering firewall rule
  3. C
    A post-implementation detective audit log review
  4. D
    An enterprise data governance classification schedule

Cevap

The administrator should implement a security configuration baseline profile, which establishes standardized, pre-approved hardening settings for newly deployed systems.
A configuration baseline profile defines a mandatory minimum standard for operating systems and applications, ensuring consistent hardening across all deployed assets.

Adım Adım Çözüm

1
Identify the goal in the scenario
The requirement is to define standard, hardened security settings across all newly deployed systems.
The system lifecycle requires consistent initial configurations to prevent security weaknesses before systems enter production.
2
Evaluate potential configuration management tools
A security configuration baseline defines the standard minimum security setup (e.g., CIS benchmarks, DISA STIGs) for systems.
Baselines ensure uniformity, simplify drift monitoring, and minimize misconfigurations.

Anahtar Kavram

Security Baselines and Configuration Management
Bu soruyu puanla