nerdexam
(ISC)2

CSSLP · Question #377

Secure configuration management (CM) is most useful for what?

The correct answer is C. Preventing integrity breaches. Secure configuration management is most useful for preventing integrity breaches by ensuring systems and applications are configured securely and consistently.

Secure Software Deployment, Operations, Maintenance

Question

Secure configuration management (CM) is most useful for what?

Options

  • ASprint planning
  • BReviewing documentation
  • CPreventing integrity breaches
  • DSecuring data repositories

How the community answered

(53 responses)
  • A
    2% (1)
  • B
    4% (2)
  • C
    94% (50)

Why each option

Secure configuration management is most useful for preventing integrity breaches by ensuring systems and applications are configured securely and consistently.

ASprint planning

Sprint planning is a project management activity within agile development, not the primary purpose of secure configuration management.

BReviewing documentation

Reviewing documentation is a general process that supports many areas, but it's not the most direct or specific benefit of secure configuration management itself.

CPreventing integrity breachesCorrect

Secure configuration management involves defining, implementing, and maintaining secure baselines for systems, applications, and network devices. By ensuring that all configurations adhere to these baselines and that unauthorized changes are detected and prevented, CM significantly reduces the attack surface and helps prevent integrity breaches that could arise from misconfigurations or unhardened systems.

DSecuring data repositories

Securing data repositories is a broader security goal, whereas secure configuration management is a specific control for ensuring the integrity and security posture of the systems accessing and hosting that data.

Concept tested: Purpose of secure configuration management

Source: https://learn.microsoft.com/en-us/azure/architecture/framework/security/security-governance-policies#configuration-management

Topics

#Configuration Management#Integrity#Security Baselines

Community Discussion

No community discussion yet for this question.

Full CSSLP Practice