Which one of the following is a common risk with network configuration management?

Patch management is a related but distinct discipline from network configuration management; keeping patches current is a patch management risk, not a core risk of configuration management itself.

Assigning responsibility to a systems administrator describes an organizational or role-assignment decision, not a risk inherent to the network configuration management process.

Password expiration policies fall under identity and access management (IAM) or account management controls, not network configuration management.

Network diagrams are a critical component of configuration management, providing a baseline understanding of topology, device relationships, and data flows. When diagrams are not kept up to date, administrators lack an accurate reference for troubleshooting, auditing, and change management, which can lead to misconfigurations, security gaps, and compliance failures. This is a direct and common risk specifically associated with network configuration management processes.