What term refers to configuration guides, benchmarks, and best practices for deploying and maintaining a network device or application server in a secure state for its given role?

What term refers to configuration guides, benchmarks, and best practices for deploying and maintaining a network device or application server in a secure state for its given role?

• A. Vulnerability feed
• B. CVE
• C. Environmental variables
• D. Secure baseline

Answer: (D)

Establishing a secure baseline means defining a documented set of configuration standards that determine how a network device or server should be set up to minimize risk for its role. This collection of configuration guides, benchmarks, and best practices creates a repeatable, defensible state that deployments can start from and maintain as changes happen. It supports consistency across environments, makes audits easier, and helps with regulatory compliance by ensuring the device or server operates within approved security parameters. Vulnerability feeds focus on known weaknesses discovered after deployment, and CVEs are identifiers for those specific vulnerabilities, so they don’t describe a prepared, secure configuration state. Environmental variables are runtime settings used by applications, not a broad, role-based security configuration standard.

Establishing a secure baseline means defining a documented set of configuration standards that determine how a network device or server should be set up to minimize risk for its role. This collection of configuration guides, benchmarks, and best practices creates a repeatable, defensible state that deployments can start from and maintain as changes happen. It supports consistency across environments, makes audits easier, and helps with regulatory compliance by ensuring the device or server operates within approved security parameters.

Vulnerability feeds focus on known weaknesses discovered after deployment, and CVEs are identifiers for those specific vulnerabilities, so they don’t describe a prepared, secure configuration state. Environmental variables are runtime settings used by applications, not a broad, role-based security configuration standard.