CSSLP · Question #377
Secure configuration management (CM) is most useful for what?
The correct answer is C. Preventing integrity breaches. Secure configuration management is most useful for preventing integrity breaches by ensuring systems and applications are configured securely and consistently.
Question
Secure configuration management (CM) is most useful for what?
Options
- ASprint planning
- BReviewing documentation
- CPreventing integrity breaches
- DSecuring data repositories
How the community answered
(53 responses)- A2% (1)
- B4% (2)
- C94% (50)
Why each option
Secure configuration management is most useful for preventing integrity breaches by ensuring systems and applications are configured securely and consistently.
Sprint planning is a project management activity within agile development, not the primary purpose of secure configuration management.
Reviewing documentation is a general process that supports many areas, but it's not the most direct or specific benefit of secure configuration management itself.
Secure configuration management involves defining, implementing, and maintaining secure baselines for systems, applications, and network devices. By ensuring that all configurations adhere to these baselines and that unauthorized changes are detected and prevented, CM significantly reduces the attack surface and helps prevent integrity breaches that could arise from misconfigurations or unhardened systems.
Securing data repositories is a broader security goal, whereas secure configuration management is a specific control for ensuring the integrity and security posture of the systems accessing and hosting that data.
Concept tested: Purpose of secure configuration management
Source: https://learn.microsoft.com/en-us/azure/architecture/framework/security/security-governance-policies#configuration-management
Topics
Community Discussion
No community discussion yet for this question.