CGRC · Question #52
Which NIST special configuration provides guidance on security-focused configuration management? Response:
The correct answer is A. NIST SP 800-128. NIST SP 800-128 provides specific guidance on establishing and maintaining security-focused configuration management processes. This publication helps organizations manage system configurations to reduce vulnerabilities and ensure security baselines are maintained.
Question
Which NIST special configuration provides guidance on security-focused configuration management? Response:
Options
- ANIST SP 800-128
- BNIST SP 800-37
- CNIST SP 800-30
- DNIST SP 800-137
How the community answered
(36 responses)- A89% (32)
- B6% (2)
- C3% (1)
- D3% (1)
Why each option
NIST SP 800-128 provides specific guidance on establishing and maintaining security-focused configuration management processes. This publication helps organizations manage system configurations to reduce vulnerabilities and ensure security baselines are maintained.
NIST SP 800-128, titled 'Guide for Security-Focused Configuration Management of Information Systems,' specifically provides comprehensive guidance for implementing and managing configuration management practices to enhance system security throughout its lifecycle.
NIST SP 800-37 focuses on the Risk Management Framework (RMF) for federal information systems, outlining the process for managing security and privacy risk.
NIST SP 800-30 provides guidance for conducting risk assessments, identifying and analyzing risks to organizational operations and assets.
NIST SP 800-137 deals with information security continuous monitoring (ISCM), providing guidance for maintaining ongoing awareness of information security status.
Concept tested: NIST Special Publications configuration management
Source: https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-128.pdf
Topics
Community Discussion
No community discussion yet for this question.