Study. uk . com
  1. Home
  2. All questions
  3. Question 390

CISM study material · question 390 of 1000

Which observable trend does NIST offer as evidence that configuration management is working?

  1. A decrease in the number of systems in the inventory
  2. An increase in the average time to approve a change
  3. A decrease in incidents caused by known vulnerabilities for which patches had already been distributed
  4. An increase in the number of change requests submitted
Show the answer

Answer: C. A decrease in incidents caused by known vulnerabilities for which patches had already been distributed

SP 800-100 points to fewer incidents traceable to vulnerabilities whose patches had already gone out to administrators — evidence the configuration process is actually landing fixes.

Source: NIST SP 800-100 (NIST) — Table 2-1 Configuration Management

Challenge yourself on this topic → Study as cards