Study. uk . com
  1. Home
  2. All questions
  3. Question 568

CISM study material · question 568 of 1000

What standard does the configuration settings control set for how security settings should be configured?

  1. The least restrictive mode that satisfies the control baseline
  2. The configuration used by comparable organisations
  3. The vendor's default configuration in every case
  4. The most restrictive mode consistent with the system's operational requirements
Show the answer

Answer: D. The most restrictive mode consistent with the system's operational requirements

The configuration settings control sets security settings as tight as the system's operational requirements will allow, rather than leaving vendor defaults in place.

Source: NIST SP 800-100 (NIST) — Table 14-1 CM Control Family

Challenge yourself on this topic → Study as cards