CompTIA Server+ (SK0-005)Security and Disaster RecoveryEasy
A server administrator is implementing a new security policy that dictates all server configurations must be regularly audited for deviations from baseline settings. This is primarily a measure to prevent which of the following?
- ADenial of Service (DoS) attacks
- BPhysical server compromise
- CZero-day exploits
- DConfiguration drift
Show answer & explanationAnswer & explanation
Correct answer: D. Configuration drift
Regularly auditing server configurations for deviations from baseline settings is a direct method to identify and prevent configuration drift. Configuration drift occurs when server settings change over time from an approved, secure baseline, often leading to vulnerabilities.
Why the other options are wrong
- A. DoS attacks aim to make a service unavailable, which is not directly prevented by configuration auditing.
- B. Physical server compromise involves unauthorized access to the server hardware, which is not addressed by auditing software configurations.
- C. Zero-day exploits leverage unknown vulnerabilities and are not directly preventable by auditing against baseline configurations.
Configuration Drift
Configuration drift is the gradual, unintended divergence of a system's configuration from its original baseline or desired state over time.
- Can introduce security vulnerabilities.
- Makes troubleshooting more difficult.
- Regular auditing helps detect and mitigate it.
Memory trick: Drifting configurations can cause a server's security to suffer a 'drift' in quality.