Study. uk . com
  1. Home
  2. All questions
  3. Question 172

CompTIA Security+ study material · question 172 of 611

Systems are built to a hardened baseline but drift out of compliance within weeks. Which control addresses this?

  1. More frequent vulnerability scanning
  2. Configuration enforcement that continuously corrects drift
  3. A stricter baseline document
  4. A longer maintenance window
Show the answer

Answer: B. Configuration enforcement that continuously corrects drift

Scanning detects drift; enforcement corrects it, which is what keeps a hardened baseline hardened between audits.

Challenge yourself on this topic → Study as cards