What term refers to settings for services and policy configuration for a network appliance or server operating in a particular application role (such as web server, mail server, or file/print server)?

Prepare for the Information Security Principles and Frameworks Test. Enhance your understanding with detailed questions, hints, and explanations. Ace your exam with confidence!

Multiple Choice

What term refers to settings for services and policy configuration for a network appliance or server operating in a particular application role (such as web server, mail server, or file/print server)?

Explanation:
The concept being tested is standardizing how a server or appliance is configured for a specific role. In practice, you define a baseline configuration for that role—such as a web server, mail server, or file/print server—that captures the approved settings, services, security controls, permissions, logging, patch levels, and policy rules. This baseline acts as a reference point for provisioning new systems and for auditing ongoing configurations, ensuring every instance of that role starts from and remains aligned with a known secure state. Why this fits best: configuration baselines provide a repeatable, auditable standard for how a system should be set up and managed in a given role, which is exactly what the question is describing. The other options describe different concepts that don’t address standardizing role-based configurations: isolation refers to separating networks or components, web filtering is about blocking web content, and full disk encryption focuses on protecting data at rest rather than establishing role-specific configuration standards.

The concept being tested is standardizing how a server or appliance is configured for a specific role. In practice, you define a baseline configuration for that role—such as a web server, mail server, or file/print server—that captures the approved settings, services, security controls, permissions, logging, patch levels, and policy rules. This baseline acts as a reference point for provisioning new systems and for auditing ongoing configurations, ensuring every instance of that role starts from and remains aligned with a known secure state.

Why this fits best: configuration baselines provide a repeatable, auditable standard for how a system should be set up and managed in a given role, which is exactly what the question is describing. The other options describe different concepts that don’t address standardizing role-based configurations: isolation refers to separating networks or components, web filtering is about blocking web content, and full disk encryption focuses on protecting data at rest rather than establishing role-specific configuration standards.

Subscribe

Get the latest from Examzify

You can unsubscribe at any time. Read our privacy policy