セキュリティ監査中に、コンサルティング会社はドキュメントと実際の環境の間に不一致があることに気付きました。変更を行った人物と変更内容を記録できるのは、次のうちどれですか?
正解:B
Configuration monitoring and management tools (often part of network management systems) maintain version-controlled records of device configurations, track changes, and log who made them. This provides accountability and supports compliance audits.
A . Network access control (NAC) manages endpoint access policies but does not track device config changes.
C . Zero Trust is a security framework requiring strict identity verification, not a configuration tracking tool.
D . Syslog collects system logs, but without a config monitoring system, it does not directly compare documentation to device state.
Reference (CompTIA Network+ N10-009):
Domain: Network Operations - Change management, configuration management, auditing.