Configuration Management

Question 1

What is the only constant in IT security?

Answer 1

Change - Operating systems will change, patches, application updates, network modifications, new application instances, hardware, software, etc. You will have to modify your security to adapt to the changes. Documentation will be critical to track and control everything.

Question 2

What will be included in Diagrams?

Answer 2

Documenting the physical wire and device, physical data center layout to include physical rack locations, device diagrams including the cables from beginning to end.

Question 3

Baseline Configuration

Answer 3

The security of an application environment should be well defined. All applications instances must follow the baseline. Firewall settings, patch levels, OS file versions. This may require constant updates.

Question 4

Integrity measurement checks

Answer 4

Should be performed often and should check your security settings with the established baselines in the documentation. If the checks fail then corrections need to be immediately implemented.

Question 5

Standard naming conventsion

Answer 5

Create a standard by which everyone in the business can easily follow. Devices need to have asset tag names and numbers, computer need to have standardized labeling for location and/or region. Use serial numbers for each device. Networks need standardized port labeling, domain configs need to follow account naming guidelines. Emails addresses should follow a standard as well.

Question 6

IP schema

Answer 6

IP addresses should be organized in a consistent system for network devices. It helps prevent duplicate IP addressing. Locations should have numbers of subnets, and hosts per subnet. IP ranges should be established per site and have different subnets. Addresses should be annotated and reserved for devices such as users, printers, routers/default gateways.