Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified Information Security Manager · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
Enforcing standard system configurations based on secure configuration benchmarks ensures that servers are configured in a secure and consistent manner. This reduces the likelihood of vulnerabilities resulting from misconfigurations that could be exploited by attackers. Secure configuration benchmarks provide guidelines and best practices for configuring systems to minimize security risks. While implementing network and system-based anomaly monitoring software (option B), enforcing configurations for secure logging and audit trails (option C), and implementing host-based intrusion detection systems (IDS) (option D) are valuable security measures, enforcing secure configurations is a foundational control that addresses the root cause of many vulnerabilities.
A. Many systems, such as Windows OS, come out of box with many vulnerabilities so a secure benchmark is key. Benchmark may do things like require longer PW, disable unused services and accounts that could be exploited.
A. Enforcing standard system configurations based on secure configuration benchmarks