nerdexam
CompTIA

CS0-003 · Question #150

A company offers a hardware security appliance to customers that provides remote administration of a device on the customer's network. Customers are not authorized to alter the configuration. The…

The correct answer is D. Change management. The company is using change management to track, log, and evaluate unauthorized modifications to its security appliances, ensuring configurations remain as intended.

Submitted by deeparc· Mar 6, 2026Security Operations

Question

A company offers a hardware security appliance to customers that provides remote administration of a device on the customer's network. Customers are not authorized to alter the configuration. The company deployed a software process to manage unauthorized changes to the appliance log them, and forward them to a central repository for evaluation. Which of the following processes is the company using to ensure the appliance is not altered from its original configured state?

Options

  • ACI/CD
  • BSoftware assurance
  • CAnti-tamper
  • DChange management

How the community answered

(28 responses)
  • A
    7% (2)
  • C
    4% (1)
  • D
    89% (25)

Why each option

The company is using change management to track, log, and evaluate unauthorized modifications to its security appliances, ensuring configurations remain as intended.

ACI/CD

CI/CD (Continuous Integration/Continuous Delivery) is a software development practice for automating the build, test, and deployment phases, not for managing unauthorized configuration changes to hardware appliances.

BSoftware assurance

Software assurance focuses on ensuring software is free from vulnerabilities and functions correctly, not on managing changes to hardware appliance configurations.

CAnti-tamper

Anti-tamper refers to mechanisms designed to prevent or detect physical or logical alteration of a device, but the described process of logging and forwarding changes for evaluation is a broader change management activity rather than just an anti-tamper measure.

DChange managementCorrect

Change management is a structured process that controls, logs, and monitors all modifications made to IT systems, including configurations. By deploying a process to manage unauthorized changes, log them, and forward them for evaluation, the company is implementing controls to maintain the integrity of its appliance configurations, which is a core function of change management.

Concept tested: Change management for configuration integrity

Source: https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-128.pdf

Topics

#change management#configuration management#system integrity#security auditing

Community Discussion

No community discussion yet for this question.

Full CS0-003 Practice