Exam SY0-701 topic 1 question 538 discussion

Actual exam question from CompTIA's SY0-701

Question #: 538
Topic #: 1

Which of the following most accurately describes the order in which a security engineer should implement secure baselines?

A. Deploy, maintain, establish
B. Establish, maintain, deploy
C. Establish, deploy, maintain
D. Deploy, establish, maintain

Show Suggested Answer

Suggested Answer: C 🗳️

by test_arrow at Feb. 19, 2025, 2:06 a.m.

Comments

Submit Cancel

test_arrow

2 months, 2 weeks ago

Selected Answer: C

C. Establish, Deploy, Maintain Establish – First, the security engineer must define the secure baseline based on best practices, compliance requirements, and organizational needs. This includes: Configuring secure settings for operating systems, applications, and network devices. Following industry standards (e.g., CIS benchmarks, NIST, ISO 27001). Deploy – Once the baseline is established, it must be implemented across all systems. This includes: Applying configurations to production environments. Ensuring proper enforcement through automation (e.g., Group Policies, Ansible, SCCM). Maintain – Security is an ongoing process, so baselines must be regularly updated and monitored to address new threats. This includes: Patching vulnerabilities. Conducting compliance audits. Adjusting configurations based on evolving threats.

upvoted 2 times

...