Study. uk . com
  1. Home
  2. All questions
  3. Question 763

CISM study material · question 763 of 1000

Why does the Community Profile recommend monitoring configurations against security baselines?

  1. So that drift away from the baseline is itself treated as a detectable adverse event
  2. So that the configuration changes that are made can be billed back to the right cost centre each month
  3. So that the baseline can be updated to match reality
  4. So that the change board's approvals can be audited
Show the answer

Answer: A. So that drift away from the baseline is itself treated as a detectable adverse event

SP 800-61r3 recommends monitoring software and hardware configurations for deviations from security baselines, treating divergence from the approved configuration as something detection should surface.

Source: NIST SP 800-61 Rev. 3 (NIST) — Table 3 DE.CM-09.R3

Challenge yourself on this topic → Study as cards