What is a security baseline?

A list of all software applications installed on a system

A record of all user passwords and credentials

A plan for responding to security incidents

A set of minimum security configurations that systems must meet

An organization is implementing a security baseline for its database servers. The baseline includes specific settings for authentication, encryption, and auditing. What is the primary purpose of this baseline?

To provide a checklist for auditors to verify compliance with industry regulations.

To document the default settings provided by the database vendor.

To establish a minimum secure configuration standard that all database servers must meet.

To ensure all database servers have the same performance characteristics.

Which of the following is a key step in the patch management process?

Applying patches only when a system is compromised

Deploying patches immediately without testing to save time

Testing patches in a non-production environment before deployment

Ignoring patches for non-critical systems

How does a security baseline help in establishing a minimum secure configuration standard?

By monitoring network traffic for threats

By providing a reference point that all systems must meet or exceed

By encrypting all data on the system

By automatically patching all systems daily

What is the primary purpose of patch management?

To monitor system performance and usage

To apply updates that fix security vulnerabilities and improve functionality

To create user accounts and manage permissions

Certified in Cybersecurity

Domain 5Objective 2

5.2 - Understand System Hardening CC Practice Questions (Page 4)

Part of the Security Operations domain, which accounts for 18% of the CC exam. ISC2 does not publish an official question count, but from its 120-minute exam (~50–80 total, ~9–14 in this domain), expect 2–4 from this objective — we provide 26 practice questions to prepare you well beyond it. (estimate)

26questions here

6free pages

6concepts

18%of the exam

Questions 16–20

16foundation · easy
What is a security baseline?
Select an answer first
17application · medium
An organization is implementing a security baseline for its database servers. The baseline includes specific settings for authentication, encryption, and auditing. What is the primary purpose of this baseline?
Select an answer first
18foundation · easy
Which of the following is a key step in the patch management process?
Select an answer first
19foundation · easy
How does a security baseline help in establishing a minimum secure configuration standard?
Select an answer first
20foundation · easy
What is the primary purpose of patch management?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CC” is a trademark of its owner, used for identification only.