Configuration Management controls what?
A.
Auditing of changes to the Trusted Computing Base
B.
Control of changes to the Trusted Computing Base
C.
Changes in the configuration access to the Trusted Computing Base
D.
Auditing and controlling any changes to the Trusted Computing Base
Explanation:
“Official Definition of Configuration Management Identifying, controlling, accounting for and
auditing changes made to the baseline TCB, which includes changes to hardware, software, and
firmware. A System that will control changes and test documentation through the operational life
cycle of a system.” Pg 698 Shon Harris: All-in-One CISSP Certification “[B3] The security administrator
role is clearly defined, and the system must be able to recover from failures without its security level
being compromised.” Pg. 226 Shon Harris CISSP All-In-One Exam Guide