CompTIA CASP+ Practice Test

What is the likely reason for noncompliance discovered during an audit six months after desktops were hardened at the OS level?

1. The devices are being modified in production.

2. Unauthorized software was installed.

3. Insufficient network security protocols.

4. Compliance training was not provided.

The correct answer is: The devices are being modified in production.

The situation described highlights a common issue that arises after hardening processes are implemented on operating systems. If desktops were hardened six months prior to the audit and noncompliance was discovered, it strongly suggests that the devices may have been changed or modified in ways that violate the established security configurations or policies. When systems are hardened, specific configurations are set to enhance security, such as disabling unnecessary services, applying security patches, and restricting user permissions. Any alterations to these settings, whether through legitimate updates, user modifications, or unapproved changes, can lead to noncompliance. This could include installing new hardware, software changes, or altering system settings that could expose vulnerabilities. While unauthorized software installation, network security protocol insufficiencies, and lack of compliance training can all contribute to broader compliance issues, the presence of specific deviations on already hardened desktops directly points to the likelihood of unauthorized modifications occurring in the production environment, ultimately causing the noncompliance identified in the audit.