Question

A system administrator built all company web servers from a documented secure baseline last year. During a recent review, several servers were found running services and settings that no longer match that baseline, even though no approved changes were recorded. What is the BEST way to describe and address this situation?

Accepted Answer

The servers have experienced configuration drift and should be brought back into alignment with the baseline through change management

Answer

The baseline is outdated and should simply be replaced with each server's current settings

Answer

The servers were correctly patched, so no further action is required

Answer

The servers should be immediately wiped and reimaged without investigation