in reviewing the configurations on a computer what steps should the security analyst undertake to effectively audit the current configurations and properly document the chnages made? $-$ review logs to identify changes $-$ conduct penetration testing $-$ document detailed change log and rationale $-$ compare current configuration with known$-$ good baseline $-$ perform a risk assessment.