CRISC: Certified in Risk and Information Systems ControlDemo

By Isaca · Question Mode

QuestionQ436

Technology and Security

Which of the following is the MOST effective control for maintaining the integrity of system configuration files?

  • A Implementing automated vulnerability scanning
  • B Restricting access to configuration documentation
  • C Recording changes to configuration files
  • D Monitoring against the configuration standard
Explanation

Monitoring system configuration files against an approved configuration standard detects unauthorized changes and configuration drift, helping ensure that the active configuration remains intact and compliant with the established baseline.

Community Discussion

No comments yet. Be the first to start the discussion!