CISSP · Question #232
In configuration management, what baseline configuration information MUST be maintained for each computer system?
The correct answer is A. Operating system and version, patch level, applications running, and versions.. Baseline configuration information is the set of data that describes the state of a computer system at a specific point in time. It is used to monitor and control changes to the system, as well as to assess its compliance with security standards and policies. Baseline configurati
Question
In configuration management, what baseline configuration information MUST be maintained for each computer system?
Options
- AOperating system and version, patch level, applications running, and versions.
- BList of system changes, test reports, and change approvals
- CLast vulnerability assessment report and initial risk assessment report
- DDate of last update, test report, and accreditation certificate
How the community answered
(33 responses)- A88% (29)
- B3% (1)
- C6% (2)
- D3% (1)
Explanation
Baseline configuration information is the set of data that describes the state of a computer system at a specific point in time. It is used to monitor and control changes to the system, as well as to assess its compliance with security standards and policies. Baseline configuration information must include the operating system and version, patch level, applications running, and versions, because these are the essential components that define the functionality and security of the system. These components can also affect the compatibility and interoperability of the system with other systems and networks. Therefore, it is important to maintain accurate and up-to-date records of these components for each computer system.
Topics
Community Discussion
No community discussion yet for this question.