200-201 Question 321
Single answerA security operations team is investigating a recent breach in which an unauthorized user gained access to sensitive systems. During the investigation, they discovered that the unauthorized user exploited a misconfigured server that had not been updated in over a year. Which configuration management practice could have prevented this breach?
- A
Implementing automated configuration monitoring and remediation tools
- B
Disabling all system updates to maintain stability
- C
Allowing individual users to manually configure critical servers
- D
Relying solely on periodic penetration testing to identify vulnerabilities
Show answer and explanation
Correct answer: A
Explanation
Configuration management is essential for maintaining secure systems. Implementing automated configuration monitoring and remediation ensures that servers are consistently updated and compliant with security policies. This reduces the risk of breaches caused by misconfigurations or outdated software, as seen in the scenario.
- A. Correct.
Automated configuration monitoring and remediation tools ensure that systems remain compliant with security policies and receive necessary updates, reducing the risk of misconfigurations and outdated software.
- B. Incorrect.
Disabling system updates can lead to vulnerabilities as software and security patches are not applied, making systems susceptible to exploitation.
- C. Incorrect.
Allowing individual users to manually configure critical servers increases the risk of human error and inconsistent configurations, which can lead to vulnerabilities.
- D. Incorrect.
While penetration testing is important, relying solely on it does not address day-to-day configuration management and continuous compliance.