Examkin

Question

Difficulty: EasySecurity Governance Structures and Policy Frameworks

An enterprise security team needs to publish a document that specifies the mandatory minimum technical security settings required for all newly deployed cloud virtual machines. Which type of security governance document should the team create to define these mandatory minimum configurations?

  1. Security baselineAnswer
  2. B
    Security guideline
  3. C
    Acceptable use policy
  4. D
    Access authorization matrix

Answer

A security baseline document defines the minimum mandatory technical configurations required for systems.
A security baseline provides a mandatory set of minimum security settings and configuration controls that all systems of a given type must meet to ensure consistent hardening.

Step-by-Step Solution

1
Analyze the scenario requirements
The requirement specifies mandatory minimum technical security configurations for virtual machines.
Identifying whether requirements are mandatory technical settings, high-level directives, or optional advice determines the document classification.
2
Evaluate document types against governance definitions
A security baseline explicitly establishes the mandatory minimum build and security controls for operating systems or hardware.
Baselines ensure consistent hardening across deployments.

Key Concept

Security Baselines and Policy Hierarchy
Rate this question

Topics

Security Governance Structures and Policy Frameworks

More questions from this topic