Firewall and server configurations for a city DMZ keep drifting from the approved build. What configuration-management approach best reduces that drift?
Select an answer to reveal the explanation.
Short Explanation
Drift is what happens when every admin freestyles the firewall. Lock a baseline, provision from it, and automate the enforcement so the DMZ matches the approved build. Undocumented daily surprises are the opposite of configuration management.
Full Explanation
Configuration management in security operations uses baselining, controlled provisioning, and automation to keep systems aligned with approved secure states and to detect drift. Undocumented one-off changes and unique unmanaged images increase outage and vulnerability risk. Consistent configuration is foundational to reliable preventive and detective controls.