Exam SY0-701 topic 1 question 62 discussion

Automation involves using tools and scripts to regularly check and report on the security settings of servers. This method ensures consistent, real-time monitoring and can quickly detect any unauthorized changes. It is more reliable and efficient compared to manual methods, compliance checklists, or periodic attestations, which may not capture changes as promptly or consistently.

Automation is the best way to consistently and reliably detect changes in security settings on servers daily (or even in real time). Tools like configuration management systems (e.g., Ansible, Chef, Puppet), file integrity monitoring (e.g., Tripwire), or SIEM solutions can automatically check for and alert on unauthorized changes.

Automation ensures real-time monitoring, reduces human error, and provides scalability, making it the best choice for daily determination of security setting modifications.

You want the servers to be security attested - that they don't have vulns. I think the term is more specific than automation

Change management logs are often signed by administrators, to track changes that may have been done to servers. This is a form attestation.

Automation involves using tools and scripts to perform tasks automatically without manual intervention. In the context of security, automation can be used to regularly check server configurations, security settings, and detect unauthorized changes. -Consistency: Automated tools can run checks daily without fail, ensuring that any modifications to security settings are promptly identified and reported. -Efficiency: Automation reduces the need for manual labor, allowing IT teams to focus on other critical tasks while ensuring that security settings are continuously monitored. -Real-Time Alerts: Automation tools can be configured to send alerts or notifications whenever a security setting is changed, enabling quick responses to potential security breaches.

• Attestation – Provides an opinion of truth or accuracy of a company’s security positioning