A device found not to comply with the security baseline should be:

Question

Options

• AMarked as potentially vulnerable and placed in a quarantine area
• BDisabled or separated into a quarantine area until a virus scan can be run
• CPlaced in a demilitarized zone (DMZ) until it can be reviewed and updated
• DDisabled or isolated into a quarantine area until it can be checked and updated

• A
  4% (1)
• D
  96% (24)

Explanation

Security baselines are used to guarantee that network devices, software, hardware and endpoints are configured consistently. Baselines ensure that all such devices comply with the security baseline set by the organization. Whenever a device is found not compliant with the security baseline, it may be disabled or isolated into a quarantine area until it can be checked and updated (see ISC2 Study Guide, chapter 5, module 2, under Configuration Management Overview). A DMZ is a protected boundary network between external and internal networks. Systems accessible directly from the Internet are permanently connected in this network, where they are protected by a firewall; however, a DMZ is not a quarantine area used to temporarily isolate devices.

No community discussion yet for this question.