Exam SY0-601 topic 1 question 529 discussion

Why would you build an updated baseline config of a fresh untouched device. B; Removing unneeded applications reduces the system's attack surface. This choice suggests that by wiping a device and installing a clean image, a company removes potentially unnecessary software, reducing vulnerabilities and the chance of a successful cyber attack. This is a genuine security concern, especially when considering "bloatware" and other pre-installed software that might have known vulnerabilities or introduce unnecessary risks.

lol. how is the baseline updated by erasing followed by installing a master image? either you misread or you just blindly follow chatgpt. Baseline is only UPDATED when there is some form of comparison involved between the current master image/ baseline config against suggested improvements.

B - Per Dion Training 601 Unnecessary Applications- Process of configuring workstation or server to only provide essential applications and services. Utilize a secure baseline image when adding new computers. Per Dion Training 701 - Creating Secure Baseline Images- Secure baseline images are used to install new computers. Images include the OS, minimum required applications, and strict configurations.

The statement in answer C: is actually not true. Re-imaging a system does not create an updated baseline.

B. Other answers have merit, but B seems to be the best answer. Removing unnecessary software and configurations reduces the attack surface of the system.

The reason why it's not C is because re-imaging a system does not create an updated baseline.

Answer is C. Reimaging a system creates an updated baseline of the computer image

C. Reimagine the system…baseline Wouldn’t reimaging the system also remove PUPs and any potential attack surfaces?

C covers the removal of PUA. B doing the same thing. C covers creating a new baseline so you know it has the expected config for the expected apps.

That's what desktop engineer team is for in corporate IT environment. They build custom windows image. Laptops are reimaged with company's custom image.

Maybe option C should have been: "Reimaging a system creates a **compliant** baseline of the computer image?"

I see why many vote for B, and I think its a good option. However, the Q is mainly discussing "reimaging" rather than the removal of applications. establishing a baseline here is about leaving no chance of letting any apps or misconfigurations fall in between the cracks. Thats why I say C

B When you purchase new workstations, your infrastructure already has an established baseline. New pc's don't establish baselines...and yes, ChatGpt is wrong

C. Reimaging a system creates an updated baseline of the computer image

Operating system

B seems like it's geared more towards a security perspective. Although it's a new system bloatware adds the task of having to keep it up to date to avoid any vulnerabilities. There was a case 2 yrs ago where this actually happened. There was a pre-loaded HP app that came with their computers out of the box and it compromised millions of users.

read q properly