nerdexam
(ISC)2

CERTIFIED-IN-CYBERSECURITY · Question #321

What is the PRIMARY objective of baselines?

The correct answer is A. To establish a minimum level of protection that can be used as a reference point. The primary objective of a security baseline is to establish a minimum level of protection that serves as a reference point for consistent security across systems. Baselines define the lowest acceptable security configuration (e.g., a hardened OS baseline), ensuring every…

Security Principles

Question

What is the PRIMARY objective of baselines?

Options

  • ATo establish a minimum level of protection that can be used as a reference point
  • BTo protect data from unauthorized access
  • CTo identify potential threats
  • DTo monitor and detect security events

How the community answered

(46 responses)
  • A
    91% (42)
  • B
    2% (1)
  • C
    2% (1)
  • D
    4% (2)

Explanation

The primary objective of a security baseline is to establish a minimum level of protection that serves as a reference point for consistent security across systems. Baselines define the lowest acceptable security configuration (e.g., a hardened OS baseline), ensuring every system meets at least that standard. They are reference points for comparison and compliance. Protecting data from unauthorized access (B), identifying threats (C), and monitoring security events (D) are important security functions, but they describe other controls - not the defining purpose of a baseline.

Topics

#Security baselines#Security controls#Configuration management#Security standards

Community Discussion

No community discussion yet for this question.

Full CERTIFIED-IN-CYBERSECURITY Practice