Security Baseline Assessment Quiz

What you'll be asked

1. Which of the following is considered a primary purpose of establishing a security baseline?
2. When monitoring security baselines for cloud infrastructure, which tool is most effective for detecting configuration drift in real-time?
3. You notice that several workstations are running services that were explicitly disabled in the organization's security baseline. What is the most appropriate first step in the troubleshooting process?
4. Why is 'Principle of Least Privilege' (PoLP) a critical component of a security baseline?
5. During a security baseline audit, you discover that a legacy application requires an insecure SMBv1 protocol to function, contradicting the modern baseline. How should this be handled to maintain security posture?

Answers and explanations come after you submit.