Based on the results of a recent audit, a company rolled out a standard computer image in an effort to provide consistent security configurations across all computers. Which of the following…

Question

Options

• ASchedule weekly vulnerability assessments
• BImplement continuous log monitoring
• CScan computers weekly against the baseline
• DRequire monthly reports showing compliance with configuration and updates

• A
  5% (1)
• B
  14% (3)
• C
  76% (16)
• D
  5% (1)

Explanation

Scanning computers weekly against the established baseline directly and continuously compares each machine's current configuration state to the known-good standard image. Any drift - installed software, changed registry keys, modified settings - is immediately detected as a deviation. This is the technical control most tightly aligned with detecting unauthorized configuration changes. Option A (vulnerability assessments) identifies security weaknesses but does not specifically compare against a configuration baseline. Option B (continuous log monitoring) is valuable for detecting events but logs can be incomplete or tampered with and do not constitute a direct configuration comparison. Option D (monthly compliance reports) is too infrequent and relies on self-reporting rather than technical verification.

No community discussion yet for this question.