(ISC)2 Certified in Cybersecurity Practice Exam

What is defined as the documented lowest security configuration allowed by standards?

1. Baseline

2. Threshold

3. Benchmark

4. Standard

The correct answer is: Baseline

The correct choice is the term defined as the documented lowest security configuration allowed by standards. A baseline serves as a crucial point of reference in the context of security. It establishes the minimum security measures, settings, and configurations that must be adhered to within an organization or system. By defining what is acceptable, a baseline helps ensure consistent security practices across all systems and aids in compliance with relevant regulations and standards. This foundational document also plays a significant role in security auditing, allowing organizations to measure their actual configurations against the established norms. Any deviations from the baseline can be identified and addressed, helping to maintain a secure environment. By having clear baselines, organizations can strengthen their security posture and facilitate a proactive stance toward potential vulnerabilities. Other terms like threshold, benchmark, and standard may have related meanings in the context of security, but they do not specifically define the lowest acceptable security configuration allowed by established guidelines, making baseline the most appropriate choice.