nerdexam
CompTIA

CLO-002 · Question #492

An organization has experienced repeated occurrences of system configurations becoming incorrect over time. After implementing corrections on all system configurations across the enterprise, the…

The correct answer is A. Baseline. A baseline is a standard or reference point that is used to measure and compare the current state of a system or process. A baseline can be established for various aspects of a system, such as performance, security, configuration, functionality, or quality. A baseline can help…

Cloud Management and Operations

Question

An organization has experienced repeated occurrences of system configurations becoming incorrect over time. After implementing corrections on all system configurations across the enterprise, the Chief Information Security Officer (CISO) purchased an automated tool that will monitor system configurations and identify any deviations. In the future, which of the following should be used to identify incorrectly configured systems?

Options

  • ABaseline
  • BGap analysis
  • CBenchmark
  • DCurrent and future requirements

How the community answered

(28 responses)
  • A
    82% (23)
  • B
    4% (1)
  • C
    11% (3)
  • D
    4% (1)

Explanation

A baseline is a standard or reference point that is used to measure and compare the current state of a system or process. A baseline can be established for various aspects of a system, such as performance, security, configuration, functionality, or quality. A baseline can help to identify deviations, anomalies, or changes that occur over time, and to evaluate the impact of those changes on the system or process. A baseline can also help to restore a system or process to its original or desired state, by providing a reference for corrective actions. In this case, the organization has experienced repeated occurrences of system configurations becoming incorrect over time, which can affect the security, reliability, and functionality of the systems. After implementing corrections on all system configurations across the enterprise, the CISO purchased an automated tool that will monitor system configurations and identify any deviations. In the future, the organization should use a baseline to identify incorrectly configured systems, by comparing the current system configurations with the baseline system configurations that were established after the corrections. A baseline can help the organization to detect and prevent configuration drift, which is the gradual but unintentional divergence of a system's actual configuration settings from its secure baseline configuration. A baseline can also help the organization to apply configuration management, which is the process of planning, identifying, controlling, and verifying the configuration of a system or process throughout its lifecycle.

Topics

#configuration baseline#drift detection#compliance monitoring#automated tools

Community Discussion

No community discussion yet for this question.

Full CLO-002 Practice