Question

A CySA+ analyst reviews recurring scan results and notices that several hardened servers, which passed a compliance baseline check three months ago, are now failing multiple configuration and missing-patch checks. Change records show no approved modifications to these systems during that period. Which recommendation BEST addresses the underlying cause the analyst has identified?

Accepted Answer

Implement configuration drift detection and enforce the secure baseline through an automated configuration management tool

Answer

Increase the vulnerability scan frequency from monthly to weekly to catch new findings sooner

Answer

Submit a formal risk acceptance so the failing findings can be documented and closed

Answer

Switch the affected servers from credentialed to uncredentialed scanning to reduce false positives