Certified Information Systems Security Professional CISSP · Free Practice Question Medium
Question 5
As part of an in-depth security audit, you need to verify that a critical system component adheres to its defined security baseline and configuration settings. Which method provides the MOST reliable verification that the component's configuration is properly implemented?
- A Perform a vulnerability assessment targeting potential misconfigurations.
- B Use automated scanning tools to evaluate the system's configuration.
- C Conduct a manual inspection of the system's configuration.
- D Perform a white-box test to review internal code and configurations.
Reveal correct answer
Correct answer: C
Explanation
OBJ. 6.5 - Manually inspecting the system component ensures the most accurate verification of configuration, as it allows direct review of settings without the potential false positives or incomplete analysis that automated tools may produce. White-box testing focuses on internal workings but doesn’t guarantee full configuration correctness, and vulnerability assessments seek security gaps rather than correct configurations. For support or reporting issues, include Question ID: 67d9692c50a9a91676efdd67 in your ticket. Thank you.Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
You must be logged in to post a comment.
