nerdexam
GIAC

GSEC · Question #272

Which of the following tasks is the responsibility of a Linux systems administrator who is deploying hardening scripts to his systems?

The correct answer is C. Test in a development environment before rolling out to production. Before deploying hardening scripts to production Linux systems, administrators must validate them in a development or staging environment to avoid unintended service disruptions.

Linux and Cryptography

Question

Which of the following tasks is the responsibility of a Linux systems administrator who is deploying hardening scripts to his systems?

Options

  • ARun them immediately after installation and before configuring system services.
  • BEnsure they are automatically run during the default installation of the OS.
  • CTest in a development environment before rolling out to production.
  • DApply the same script(s) to every Linux host within the enterprise.

How the community answered

(52 responses)
  • A
    15% (8)
  • B
    8% (4)
  • C
    75% (39)
  • D
    2% (1)

Why each option

Before deploying hardening scripts to production Linux systems, administrators must validate them in a development or staging environment to avoid unintended service disruptions.

ARun them immediately after installation and before configuring system services.

Running hardening scripts before configuring system services is incorrect because the scripts must be tailored to the services that will actually run - applying them first could conflict with or undo subsequent service configurations.

BEnsure they are automatically run during the default installation of the OS.

Hardening scripts are not part of the default OS installation process - they are applied post-install as a deliberate administrative action and are not automatically included by OS vendors.

CTest in a development environment before rolling out to production.Correct

Hardening scripts modify OS settings, disable services, and change permissions in ways that can break application dependencies if not validated first. Testing in a development environment allows the administrator to identify conflicts with installed services, application requirements, or site-specific configurations before impacting production systems. This follows the standard change management principle of validating changes in a non-production environment.

DApply the same script(s) to every Linux host within the enterprise.

Applying identical scripts to every Linux host ignores the fact that different hosts have different roles (web server, database, DNS) and therefore different service profiles that require role-specific hardening tailored to each host's function.

Concept tested: Hardening script validation and change management best practices

Source: https://www.cisecurity.org/cis-benchmarks

Topics

#Linux hardening#change management#security baseline#dev environment testing

Community Discussion

No community discussion yet for this question.

Full GSEC Practice