Which of the following is the best way to consistently determine on a daily basis whether security settings on servers have been modified?

Question

Options

• AAutomation
• BCompliance checklist
• CAttestation
• DManual audit

• A
  77% (37)
• B
  2% (1)
• C
  8% (4)
• D
  13% (6)

Explanation

Automation is the best choice because it enables continuous, consistent monitoring of server security settings at scale - running the same checks every day without human error, fatigue, or inconsistency. Tools like configuration management (e.g., Ansible, Chef) or SIEM systems can automatically detect drift from a known-good baseline and alert immediately.

B (Compliance checklist) is a static document used to verify settings at a point in time, but it relies on someone manually working through it - making it inconsistent and error-prone on a daily cadence. C (Attestation) is a formal sign-off process where someone certifies that controls are in place; it's periodic and trust-based, not a detection mechanism. D (Manual audit) shares the same flaw as a checklist - it's time-consuming, subject to human error, and impractical to perform thoroughly every single day across many servers.

Memory tip: The keyword "consistently" and "daily" signal scale and repeatability - only Automation can do the same thing, the same way, every day, without tiring. When you see exam questions about ongoing, repeatable security monitoring, think "automate it."

No community discussion yet for this question.