CompTIA Security+ SY0-701 Practice Question

Configuration enforcement is the active management practice of verifying and ensuring that devices adhere to a secure configuration baseline, and any deviations are corrected. It encompasses more than the initial setting up of configurations; it includes the ongoing management to prevent unauthorized changes. The incorrect options given are related practices that play a role in system and network security but do not encompass the idea of persistent verification and remediation against a set baseline of configurations. 'Compliance auditing' is often mistaken for configuration enforcement; however, it is a periodic review rather than a continuous process. The distinction is subtle but important for understanding the continuous nature of configuration enforcement.