The PRIMARY objective of a security baseline is to establish ...

Question

Options

• A... a minimum understood and acceptable level of security requirements
• B... a minimum understood and a good level of security requirements
• C... security and configuration requirements
• D... a maximum understood and an acceptable level of security requirements

• A
  88% (37)
• B
  2% (1)
• C
  7% (3)
• D
  2% (1)

Explanation

A security baseline defines the minimum understood and acceptable level of security requirements (A) that all systems within an organization must meet. It is a floor, not a ceiling - systems can exceed it, but none can fall below it. Option B is incorrect because 'good' is vague and subjective. Option C is too narrow (configuration alone). Option D is incorrect because a baseline is a minimum standard, not a maximum - setting a maximum would cap security improvements, which is counterproductive.

No community discussion yet for this question.