Which of the following describes the BEST configuration management practice?

Question

Options

• AAfter installing a new system, the configuration files are copied to a separate back-up system and
• BAfter installing a new system, the configuration files are copied to an air-gapped system and
• CThe firewall rules are backed up to an air-gapped system.
• DA baseline configuration is created and maintained for all relevant systems.

• C
  5% (1)
• D
  95% (20)

Explanation

Option D is correct because configuration management is fundamentally about establishing and maintaining a known-good baseline - a documented, repeatable standard state for each system. A maintained baseline enables change tracking, drift detection, audits, and consistent recovery, which are the core goals of configuration management as defined by frameworks like NIST and ITIL.

Why the distractors fall short:

• A and B describe backup practices (copying config files), not configuration management. Backup is a subset of availability/recovery, not the discipline of managing configurations. The distinction is between "saving a copy" vs. "defining and controlling the standard."
• C is also just a backup practice - backing up firewall rules is good hygiene, but it applies to a single component and still isn't a management practice; it doesn't address baselining, versioning, or change control.

Memory tip: Think of "configuration management" as answering the question "What should this system look like?" - that's a baseline. Backups answer "Can I restore what I had?" - that's a recovery concern. If an answer describes copying files somewhere, it's backup, not configuration management.

No community discussion yet for this question.