A company is transitioning to a new VDI environment, and a system engineer is responsible for developing a sustainable security strategy for the VDIs. Which of the following is the MOST appropriate…

Question

Options

• AFirmware update, OS patching, HIDS, antivirus, baseline, monitoring agent
• BOS patching, baseline, HIDS, antivirus, monitoring agent, firmware update
• CFirmware update, OS patching, HIDS, antivirus, monitoring agent, baseline
• DBaseline, antivirus, OS patching, monitoring agent, HIDS, firmware update

• A
  77% (37)
• B
  6% (3)
• C
  2% (1)
• D
  15% (7)

Explanation

The correct order - firmware update, OS patching, HIDS, antivirus, baseline, monitoring agent - follows the principle of hardening from the lowest layer up and capturing the baseline only after all security controls are in place. Firmware is updated first because it forms the hardware root of trust; a compromised firmware layer undermines all subsequent security controls. OS patching follows to close known vulnerabilities at the system level. HIDS and antivirus are then installed to provide host-level detection and protection. Critically, the security baseline is captured after these tools are fully installed so that the baseline represents the correct hardened state, not a partially configured one. Finally, the monitoring agent is deployed to watch against deviations from that baseline. Options B, C, and D place the baseline either too early or leave firmware until the end, which would mean the baseline is taken on an improperly hardened system.

No community discussion yet for this question.