A CISA is evaluating an organization's security configuration management program. The organization uses multiple operating systems and applications across its IT environment. Which of the following is the MOST effective approach to ensure consistent and secure baseline configurations across this diverse environment?
- AImplementing an automated configuration management tool.
- BConducting regular vulnerability scans to identify misconfigurations.
- CDeveloping and enforcing a comprehensive set of configuration standards and guidelines.
- DManual configuration of each system by experienced administrators.
Show answer & explanationAnswer & explanation
Correct answer: A. Implementing an automated configuration management tool.
In a diverse IT environment with multiple operating systems and applications, manual configuration is prone to errors and inconsistencies. While standards are important, they need to be enforced actively. Automated configuration management tools (e.g., Ansible, Puppet, Chef) are the MOST effective because they can enforce consistent baseline configurations across disparate systems, automatically detect and remediate deviations, and scale efficiently, significantly reducing human error and improving security posture.
Why the other options are wrong
- B. Vulnerability scans identify misconfigurations but are reactive; automated tools proactively ensure correct configurations.
- C. Standards are necessary but are only effective if consistently enforced, which is difficult manually across diverse systems.
- D. Manual configuration is error-prone and inconsistent, especially in a diverse and large environment.
Automated Configuration Management
The use of software tools to define, deploy, monitor, and enforce desired system configurations across an IT infrastructure, ensuring consistency, compliance, and reduced human error.
- Ensures consistent baselines.
- Scales across diverse environments.
- Automates remediation of configuration drift.
Memory trick: To keep all your machines in line, let a robot do the work.