Which of the following describes the BEST configuration management practice?

A.
After installing a new system, the configuration files are copied to a separate back-up system and
hashed to detect tampering.

B.
After installing a new system, the configuration files are copied to an air-gapped system and
hashed to detect tampering.

C.
The firewall rules are backed up to an air-gapped system.

D.
A baseline configuration is created and maintained for all relevant systems.