nerdexam
(ISC)2

CCSP · Question #232

All of the following are activities that should be performed when capturing and maintaining an accurate, secure system baseline, except ____________.

The correct answer is B. Impose the baseline throughout the environment. While baselines are applied, the act of simply 'imposing' a baseline throughout an environment without prior validation, testing, or documentation is not an activity for capturing and maintaining a secure baseline.

Submitted by satoshi_tk· Apr 18, 2026Cloud Platform & Infrastructure Security

Question

All of the following are activities that should be performed when capturing and maintaining an accurate, secure system baseline, except ____________.

Options

  • AAudit the baseline to ensure that all configuration items have been included and applied correctly
  • BImpose the baseline throughout the environment
  • CCapture an image of the baseline system for future reference/versioning/rollback purposes
  • DDocument all baseline configuration elements and versioning data

How the community answered

(46 responses)
  • A
    2% (1)
  • B
    87% (40)
  • C
    7% (3)
  • D
    4% (2)

Why each option

While baselines are applied, the act of simply 'imposing' a baseline throughout an environment without prior validation, testing, or documentation is not an activity for *capturing and maintaining* a secure baseline.

AAudit the baseline to ensure that all configuration items have been included and applied correctly

Auditing the baseline is a crucial maintenance activity to ensure its accuracy, completeness, and the correct application of all configuration items, which directly supports security and accuracy.

BImpose the baseline throughout the environmentCorrect

Imposing the baseline throughout the environment describes the *deployment* or *application* phase of a baseline, rather than an activity focused on *capturing and maintaining* an accurate, secure baseline. The maintenance activities involve auditing, imaging, and documenting the baseline itself, not its widespread forceful application without further context.

CCapture an image of the baseline system for future reference/versioning/rollback purposes

Capturing an image of the baseline system is an essential activity for versioning, future reference, and rollback capabilities, directly supporting the maintenance and security of the baseline.

DDocument all baseline configuration elements and versioning data

Documenting all baseline configuration elements and versioning data is fundamental for proper management, tracking changes, and maintaining the accuracy and security of the baseline over time.

Concept tested: Secure system baseline management activities

Source: https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-128.pdf

Topics

#System Baselines#Configuration Management#Security Operations#Baseline Maintenance

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full CCSP Practice