Cert Master

KT-SYS Configuration drift

CIS benchmark scan: SSH PermitRootLogin yes on new cloud VMs. Fix?

Multiple choice — select one answer

Answer choices

  1. a. Document as acceptable forever, without security or identity team coordination per policy.
  2. b. Share root password in chat, without security or identity team coordination per policy.
  3. c. Enforce golden image / cloud-init baseline and continuous compliance scanning
  4. d. Disable SSH and use no remote access ever, without security or identity team coordination per policy.

Architectural breakdown & explanation

Baselines and scanning prevent redeploy drift.

Correct answer(s): c. Enforce golden image / cloud-init baseline and continuous compliance scanning

Exam domain: Configuration drift (20% weight on the official guide).

Official documentation & study links

Practice this certification

This page is one question from the KeyTrain's Key Training — System Hygiene bank. Run a full timed practice exam with domain-weighted random questions in your browser.

Start practice exam View exam overview All certifications