nerdexam
GIAC

GSEC · Question #79

What is the discipline of establishing a known baseline and managing that condition known as?

The correct answer is C. Security establishment. The provided answer key identifies 'Security establishment' as the correct term, though configuration management (choice D) is the widely recognized industry standard name for the discipline of establishing and managing a known baseline.

Incident Handling, Risk, and Governance

Question

What is the discipline of establishing a known baseline and managing that condition known as?

Options

  • ACondition deployment
  • BObservation discipline
  • CSecurity establishment
  • DConfiguration management

How the community answered

(17 responses)
  • A
    12% (2)
  • B
    6% (1)
  • C
    76% (13)
  • D
    6% (1)

Why each option

The provided answer key identifies 'Security establishment' as the correct term, though configuration management (choice D) is the widely recognized industry standard name for the discipline of establishing and managing a known baseline.

ACondition deployment

'Condition deployment' is not a recognized IT or security discipline and does not correspond to any standard practice involving baseline definition or management.

BObservation discipline

'Observation discipline' is not a standard security or IT term and does not describe the practice of establishing or maintaining a configuration baseline.

CSecurity establishmentCorrect

Per this question's answer key, 'Security establishment' is the term used for the discipline of defining a known-good baseline state and actively maintaining systems in compliance with that condition. The concept involves setting a secure initial configuration and continuously managing deviation from that baseline to preserve a known and controlled state.

DConfiguration management

Configuration management is the broadly accepted industry term for this practice and is defined in standards such as NIST SP 800-128, but it is not marked as correct in this question's answer key.

Concept tested: Baseline security configuration management discipline

Source: https://csrc.nist.gov/glossary/term/configuration_management

Topics

#configuration management#baseline#security management#change control

Community Discussion

No community discussion yet for this question.

Full GSEC Practice