Examkin

Soru

Zorluk: OrtaSecurity Governance Structures and Policy Frameworks

An enterprise security team is establishing formal documentation for employee mobile devices connecting to the corporate network. Management mandates a technical document that defines enforced minimum security parameters, including mandatory AES-256 storage encryption, minimum operating system patch levels, and a mandatory 12-character passcode length. Which type of security governance document should be published to enforce these mandatory minimum technical configurations?

  1. A security baselineCevap
  2. B
    A security guideline
  3. C
    An acceptable use policy
  4. D
    A standard operating procedure

Cevap

A security baseline is the governance document used to specify mandatory minimum configuration standards and technical benchmarks across systems or devices.
A security baseline establishes compulsory minimum configuration requirements and security benchmarks that systems or devices must meet prior to network deployment.

Adım Adım Çözüm

1
Identify the nature of the requirements described in the scenario
The scenario requires establishing mandatory minimum technical settings (encryption algorithm, OS version, password length) for endpoints.
Security governance documents are categorized by whether they set high-level directives, operational steps, mandatory technical benchmarks, or discretionary suggestions.
2
Map the technical requirement to the correct governance hierarchy tier
Minimum technical configurations and security hardening settings correspond directly to a security baseline.
Baselines serve as the mandatory threshold for system builds and hardware provisioning across an organization.

Anahtar Kavram

Security Baselines and Policy Hierarchy
Bu soruyu puanla

Konular

Security Governance Structures and Policy Frameworks

Bu konudan daha fazla soru