Examkin

Soru

Zorluk: KolaySecurity Governance Structures and Policy Frameworks

An enterprise security team needs to publish a document that specifies the mandatory minimum technical security settings required for all newly deployed cloud virtual machines. Which type of security governance document should the team create to define these mandatory minimum configurations?

  1. Security baselineCevap
  2. B
    Security guideline
  3. C
    Acceptable use policy
  4. D
    Access authorization matrix

Cevap

A security baseline document defines the minimum mandatory technical configurations required for systems.
A security baseline provides a mandatory set of minimum security settings and configuration controls that all systems of a given type must meet to ensure consistent hardening.

Adım Adım Çözüm

1
Analyze the scenario requirements
The requirement specifies mandatory minimum technical security configurations for virtual machines.
Identifying whether requirements are mandatory technical settings, high-level directives, or optional advice determines the document classification.
2
Evaluate document types against governance definitions
A security baseline explicitly establishes the mandatory minimum build and security controls for operating systems or hardware.
Baselines ensure consistent hardening across deployments.

Anahtar Kavram

Security Baselines and Policy Hierarchy
Bu soruyu puanla

Konular

Security Governance Structures and Policy Frameworks

Bu konudan daha fazla soru