CCSP · Question #158
All of the following are activities that should be performed when capturing and maintaining an accurate, secure system baseline except ____________.
The correct answer is C. Include the baseline image in the asset inventory/configuration management database. The question asks to identify the activity that should NOT be performed when capturing and maintaining an accurate, secure system baseline.
Question
All of the following are activities that should be performed when capturing and maintaining an accurate, secure system baseline except ____________.
Options
- ARemove all nonessential programs from the baseline image
- BExclude the target system you intend to baseline from any scheduled updates/patching used in
- CInclude the baseline image in the asset inventory/configuration management database
- DConfigure the host OS according to the baseline requirements
How the community answered
(21 responses)- A5% (1)
- C86% (18)
- D10% (2)
Why each option
The question asks to identify the activity that should NOT be performed when capturing and maintaining an accurate, secure system baseline.
Removing all nonessential programs from the baseline image is a critical step in hardening and securing a system baseline.
Excluding the target system or baseline from any scheduled updates and patching would quickly render it insecure and should actively *not* be done if the goal is a secure baseline.
While baseline information should be tracked, directly 'including the baseline image in the asset inventory/configuration management database' is not typical; CMDBs usually store metadata and references to the image, with the actual binary image residing in a specialized, secure artifact repository.
Configuring the host OS according to the baseline requirements is the fundamental process of creating or applying a consistent and secure system configuration.
Concept tested: Secure system baseline management
Topics
Community Discussion
No community discussion yet for this question.