CompTIA SecurityX (CAS-005) — Question 250

A security architect wants to develop a baseline of security configurations. These configurations automatically will be utilized every time a new virtual machine is created. Which of the following technologies should the security architect deploy to accomplish this goal?

Answer options

• A. Snort
• B. CASВ
• C. Ansible
• D. CMDB

Correct answer: C

Explanation

Ansible is an automation tool that can be used to apply consistent configurations, making it the ideal choice for establishing a baseline of security settings for virtual machines. Snort is an intrusion detection system, CASB is a Cloud Access Security Broker that focuses on securing cloud services, and CMDB, a Configuration Management Database, is used for managing IT assets but does not apply configurations directly.