CERTIFIED-IN-CYBERSECURITY Question #426: Real Exam Question with Answer & Explanation

The correct answer is B: That all changes made to a system are authorized and validated. Configuration management ensures that all changes made to a system are authorized and validated (see ISC2 Study Guide, Chapter 5, Module 2). For example, when a software update is proposed for a system, Configuration Management ensures that the update is approved and tested to co

Security Operations

Question

What does Configuration Management guarantee?

Options

AThat all changes made to a system are authorized and invalidated
BThat all changes made to a system are authorized and validated
CThat all changes to a system are unauthorized and validated
DThat any changes made to a system are unauthorized and invalidated

Explanation

Configuration management ensures that all changes made to a system are authorized and validated (see ISC2 Study Guide, Chapter 5, Module 2). For example, when a software update is proposed for a system, Configuration Management ensures that the update is approved and tested to confirm that it works as expected and does not introduce new vulnerabilities. The remaining options do not accurately represent what Configuration Management guarantees. Suggesting that changes are unauthorized is contrary to the purpose of Configuration Management. Suggesting that changes are invalid is also incorrect; Configuration Management validates changes to ensure that they work as expected and do not compromise the security of

Topics

#Configuration Management#Change Management#Security Operations#System Integrity

Community Discussion

No community discussion yet for this question.

Full CERTIFIED-IN-CYBERSECURITY Practice Browse All CERTIFIED-IN-CYBERSECURITY Questions