CS0-003 · Question #150
A company offers a hardware security appliance to customers that provides remote administration of a device on the customer's network. Customers are not authorized to alter the configuration. The…
The correct answer is D. Change management. The company is using change management to track, log, and evaluate unauthorized modifications to its security appliances, ensuring configurations remain as intended.
Question
A company offers a hardware security appliance to customers that provides remote administration of a device on the customer's network. Customers are not authorized to alter the configuration. The company deployed a software process to manage unauthorized changes to the appliance log them, and forward them to a central repository for evaluation. Which of the following processes is the company using to ensure the appliance is not altered from its original configured state?
Options
- ACI/CD
- BSoftware assurance
- CAnti-tamper
- DChange management
How the community answered
(28 responses)- A7% (2)
- C4% (1)
- D89% (25)
Why each option
The company is using change management to track, log, and evaluate unauthorized modifications to its security appliances, ensuring configurations remain as intended.
CI/CD (Continuous Integration/Continuous Delivery) is a software development practice for automating the build, test, and deployment phases, not for managing unauthorized configuration changes to hardware appliances.
Software assurance focuses on ensuring software is free from vulnerabilities and functions correctly, not on managing changes to hardware appliance configurations.
Anti-tamper refers to mechanisms designed to prevent or detect physical or logical alteration of a device, but the described process of logging and forwarding changes for evaluation is a broader change management activity rather than just an anti-tamper measure.
Change management is a structured process that controls, logs, and monitors all modifications made to IT systems, including configurations. By deploying a process to manage unauthorized changes, log them, and forward them for evaluation, the company is implementing controls to maintain the integrity of its appliance configurations, which is a core function of change management.
Concept tested: Change management for configuration integrity
Source: https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-128.pdf
Topics
Community Discussion
No community discussion yet for this question.