Examkin

Soru

Zorluk: OrtaSecurity Governance Structures and Policy Frameworks

Following an internal compliance audit that revealed inconsistent server hardening across cloud environments, a technology firm needs to publish a mandatory document defining the minimum required technical security settings—such as disabled protocols and required encryption key lengths—that every system must satisfy before deployment. Which of the following governance document types should the security team establish to enforce these mandatory minimum technical settings?

  1. BaselineCevap
  2. B
    Guideline
  3. C
    Procedure
  4. D
    Policy

Cevap

Baseline
A security baseline specifies the mandatory minimum security configuration settings and system hardening requirements that all host systems or applications must conform to before entering production. In this scenario, creating a baseline ensures consistent minimum security thresholds across all deployed infrastructure.

Adım Adım Çözüm

1
Analyze the operational requirement described in the enterprise scenario.
The organization requires a mandatory governance document specifying minimum technical security configurations for system deployment.
Determining whether the requirement is high-level, procedural, optional, or minimum-mandatory establishes the appropriate governance document layer.
2
Evaluate governance document definitions against the requirement.
A baseline establishes mandatory minimum configuration settings across systems. Policies set high-level goals, procedures detail step-by-step tasks, and guidelines offer non-mandatory recommendations.
Comparing document types in the governance hierarchy identifies which document type sets enforceable technical minimums.
3
Select the document type designed to enforce minimum baseline configurations.
The baseline document directly satisfies the requirement for mandatory minimum technical hardening standards.
Baselines ensure consistent minimum security controls are applied before systems transition into production.

Anahtar Kavram

Security Baseline Configurations in Governance Hierarchy
Bu soruyu puanla

Konular

Security Governance Structures and Policy Frameworks

Bu konudan daha fazla soru