CompTIA Cloud+ (CV0-004)SecurityMedium
A cloud security team is establishing a baseline for security configurations across their cloud environment. They need a continuous process to verify that all deployed resources (e.g., VMs, storage buckets, databases) adhere to predefined security standards and organizational policies. This process should also identify any deviations from the baseline. Which security practice is being described?
- APenetration Testing
- BConfiguration Audit
- CVulnerability Scanning
- DSecurity Information and Event Management (SIEM)
Show answer & explanationAnswer & explanation
Correct answer: B. Configuration Audit
A configuration audit involves systematically reviewing the security configurations of systems and applications against a predefined baseline or set of policies. Its purpose is to ensure compliance and identify any unauthorized or insecure deviations, directly matching the described requirement.
Why the other options are wrong
- A. Penetration testing simulates an attack to identify exploitable vulnerabilities, which is different from verifying configuration compliance.
- C. Vulnerability scanning identifies known security weaknesses in systems or applications, but doesn't primarily focus on adherence to configuration baselines.
- D. SIEM collects and analyzes security logs and events for threat detection and incident response, not for verifying configuration adherence against a baseline.
Configuration Audit
A configuration audit is a systematic and independent examination to determine whether configurations of systems or applications conform to specified requirements, standards, or baselines.
- Compares actual configurations against a defined baseline.
- Identifies misconfigurations and policy deviations.
- Crucial for maintaining security posture and compliance.
Memory trick: Audit configurations to ensure they're in line.