Which of the following provides the BEST method to verify that security baseline configurations are maintained?

Question

Options

• APerform regular system security testing.
• BDesign security early in the development cycle.
• CAnalyze logs to determine user activities.
• DPerform quarterly risk assessments.

• A
  71% (15)
• B
  14% (3)
• C
  5% (1)
• D
  10% (2)

Explanation

Security baseline configurations are the minimum security standards or requirements that a system or network must meet to ensure a basic level of security. Security baseline configurations are often defined by the organization's policies, industry best practices, or regulatory compliance. The best method to verify that security baseline configurations are maintained is to perform regular system security testing. System security testing is a process of evaluating the security controls and mechanisms of a system or network to ensure that they are functioning properly and effectively. System security testing can help to identify any deviations from the security baseline configurations, as well as any new or emerging vulnerabilities or threats. Designing security early in the development cycle, analyzing logs to determine user activities, or performing quarterly risk assessments are also good practices, but they are not as effective or comprehensive as system security testing to verify that security baseline configurations are maintained.

No community discussion yet for this question.