68. During a security audit, a consulting firm notices inconsistencies between the documentation and the environment. Which of the following can keep a record of who made the changes and what the changes are?
Answer: B
Configuration monitoring can keep a record of who made the changes and what the changes are.
Configuration monitoring tools are specifically designed to track changes in system configurations, providing detailed logs of who made each change and what those changes entailed.
A) Network access control
Network access control primarily focuses on managing and enforcing policies regarding device access to the network. While it may log access attempts, it does not provide detailed records of configuration changes or who made them.
B) Configuration monitoring
Configuration monitoring is essential for tracking changes in system settings and configurations. It captures detailed logs that include the identity of the user who made the changes, the specific changes made, and the time those changes occurred, making it the most relevant choice for this scenario.
C) Zero Trust
Zero Trust is a security model based on the principle of never trusting any user or device by default, regardless of whether they are inside or outside the network perimeter. While it enhances security, it does not inherently provide a record of changes or user actions.
D) Syslog
Syslog is a standard for message logging that collects and stores log messages from various devices and applications. Although it can record events, it may not specifically track configuration changes in detail or provide context about who made those changes.
Conclusion
Configuration monitoring stands out as the most effective option for maintaining a record of changes made within an environment, as it captures both the nature of the changes and the identity of the individuals who made them. The other options, while relevant to security and logging, do not provide the comprehensive change tracking necessary for audit purposes. Thus, configuration monitoring is crucial for ensuring accountability and compliance in system management.