GSEC · Question #79
What is the discipline of establishing a known baseline and managing that condition known as?
The correct answer is C. Security establishment. The provided answer key identifies 'Security establishment' as the correct term, though configuration management (choice D) is the widely recognized industry standard name for the discipline of establishing and managing a known baseline.
Question
What is the discipline of establishing a known baseline and managing that condition known as?
Options
- ACondition deployment
- BObservation discipline
- CSecurity establishment
- DConfiguration management
How the community answered
(17 responses)- A12% (2)
- B6% (1)
- C76% (13)
- D6% (1)
Why each option
The provided answer key identifies 'Security establishment' as the correct term, though configuration management (choice D) is the widely recognized industry standard name for the discipline of establishing and managing a known baseline.
'Condition deployment' is not a recognized IT or security discipline and does not correspond to any standard practice involving baseline definition or management.
'Observation discipline' is not a standard security or IT term and does not describe the practice of establishing or maintaining a configuration baseline.
Per this question's answer key, 'Security establishment' is the term used for the discipline of defining a known-good baseline state and actively maintaining systems in compliance with that condition. The concept involves setting a secure initial configuration and continuously managing deviation from that baseline to preserve a known and controlled state.
Configuration management is the broadly accepted industry term for this practice and is defined in standards such as NIST SP 800-128, but it is not marked as correct in this question's answer key.
Concept tested: Baseline security configuration management discipline
Source: https://csrc.nist.gov/glossary/term/configuration_management
Topics
Community Discussion
No community discussion yet for this question.