Scribd
Upload
4 views2 pages

Configuration Management Best Practices

The document outlines core components for compliance evaluation, including Configuration Items, Configuration Baselines, and Compliance Evaluation, which help improve security and automate compliance reporting. It also highlights best practices for deploying these components and addresses technical questions regarding cloud services, specifically IaaS, PaaS, SaaS, Azure Recovery Services Vault, and security measures for Azure resources. Key benefits include improved security, automated compliance, detailed reporting, and remediation options for non-compliant settings.

Uploaded by

nasronmohdnasirsace
Copyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as DOCX, PDF, TXT or read online on Scribd
4 views2 pages

Configuration Management Best Practices

The document outlines core components for compliance evaluation, including Configuration Items, Configuration Baselines, and Compliance Evaluation, which help improve security and automate compliance reporting. It also highlights best practices for deploying these components and addresses technical questions regarding cloud services, specifically IaaS, PaaS, SaaS, Azure Recovery Services Vault, and security measures for Azure resources. Key benefits include improved security, automated compliance, detailed reporting, and remediation options for non-compliant settings.

Uploaded by

nasronmohdnasirsace
Copyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as DOCX, PDF, TXT or read online on Scribd

Core Components

🔹 Configuration Items (CIs)


Define what to check — such as a registry key, file version, or system setting.

🔹 Configuration Baselines (CBs)


Combine multiple Configuration Items to form a rule set for compliance evaluation.

🔹 Compliance Evaluation
Clients regularly check their settings against the baseline and report compliance status to SCCM.

✅ Benefits

Improved Security – Detect misconfigurations quickly.


Automated Compliance – Continuous policy enforcement.
Detailed Reporting – Track compliant vs. non-compliant systems.
Remediation Options – Automatically fix non-compliant settings.

---
Best Practices
Test baselines in a pilot collection before global deployment.
Keep naming conventions consistent (e.g., “Win10_BitLocker_Compliance”).
Schedule compliance evaluations regularly (daily/weekly).
Use reports and dashboards to monitor compliance trends.

f) Technical questions.

i) Cloud / Azure

What is the difference between IaaS, PaaS, and SaaS?

- IaaS provides virtual machines and infrastructure; PaaS offers a platform for app development;
SaaS delivers ready-to-use software (like Microsoft 365).

What is Azure Recovery Services Vault?

- A storage service used for backup and disaster recovery — it stores VM snapshots, file
backups, and enables replication across regions.

How do you monitor Azure resources?


- Use Azure Monitor, Log Analytics, and Application Insights for real-time metrics, alerts, and
performance data.

What’s the difference between Azure AD and Active Directory?

- AD is on-prem for domain-joined devices; Azure AD is cloud-based for identity and access to
SaaS apps and Microsoft 365.

How to secure Azure resources?

- By enabling MFA, using role-based access control (RBAC), configuring NSGs, and enabling
Defender for Cloud.

You might also like