GSEC · Question #272
Which of the following tasks is the responsibility of a Linux systems administrator who is deploying hardening scripts to his systems?
The correct answer is C. Test in a development environment before rolling out to production. Before deploying hardening scripts to production Linux systems, administrators must validate them in a development or staging environment to avoid unintended service disruptions.
Question
Which of the following tasks is the responsibility of a Linux systems administrator who is deploying hardening scripts to his systems?
Options
- ARun them immediately after installation and before configuring system services.
- BEnsure they are automatically run during the default installation of the OS.
- CTest in a development environment before rolling out to production.
- DApply the same script(s) to every Linux host within the enterprise.
How the community answered
(52 responses)- A15% (8)
- B8% (4)
- C75% (39)
- D2% (1)
Why each option
Before deploying hardening scripts to production Linux systems, administrators must validate them in a development or staging environment to avoid unintended service disruptions.
Running hardening scripts before configuring system services is incorrect because the scripts must be tailored to the services that will actually run - applying them first could conflict with or undo subsequent service configurations.
Hardening scripts are not part of the default OS installation process - they are applied post-install as a deliberate administrative action and are not automatically included by OS vendors.
Hardening scripts modify OS settings, disable services, and change permissions in ways that can break application dependencies if not validated first. Testing in a development environment allows the administrator to identify conflicts with installed services, application requirements, or site-specific configurations before impacting production systems. This follows the standard change management principle of validating changes in a non-production environment.
Applying identical scripts to every Linux host ignores the fact that different hosts have different roles (web server, database, DNS) and therefore different service profiles that require role-specific hardening tailored to each host's function.
Concept tested: Hardening script validation and change management best practices
Source: https://www.cisecurity.org/cis-benchmarks
Topics
Community Discussion
No community discussion yet for this question.