Identifying Security Baseline Documentation for Device Hardening
Short answer
D The analyst is creating a Secure Configuration Guide to provide specific technical baselines for hardening new devices during deployment.
Question
Key Takeaways
The exam tests the hierarchy of security documentation; candidates must recognize that 'baselines' for 'hardening' are technical instructions found in a secure configuration guide, not broad policies.
This question tests the ability to distinguish between high-level policies and technical implementation guides. A secure configuration guide provides the specific baselines required for hardening devices.
Common mistake: Candidates often select Information Security Policy (B) because they associate 'guidelines' with policy documents, failing to realize that policies are high-level statements while hardening requires specific technical configurations.
Expert Analysis
Why the Answer Is Correct
A Secure Configuration Guide (Option D) is the correct choice because it contains the specific technical settings, parameters, and best practices needed to harden systems. In the context of creating baselines for deployment, this document serves as the actionable reference for system administrators to ensure consistent security postures across new devices.
Why the Other Options Are Wrong
Information Security Policy (Option B) defines the organization's overall goals and rules but lacks the granular technical details required for device hardening. Change Management Procedures (Option A) govern how changes are approved and tracked, not how systems are configured. Cybersecurity Frameworks (Option C) provide a high-level structure for managing risk, not step-by-step configuration instructions.
Community Comment Notes
The community consensus strongly favors Option D. As noted by user Hs1208, a secure configuration guide provides detailed instructions for configuring systems securely. User Casperkey referenced the official study guide, stating that benchmarks and secure configuration guides are used as baselines for deploying assets. While one user suggested Policy (B), the technical nature of 'hardening' aligns definitively with configuration guides.
Exam Strategy
When answering questions about 'hardening' or 'baseline' configurations, look for options that imply technical specificity like 'guide', 'benchmark', or 'profile'. Avoid 'policy' unless the question explicitly mentions governance, compliance, or high-level organizational rules.
Frequently Asked Questions
What is the difference between a security policy and a configuration guide?
Why is a cybersecurity framework not the right answer here?
Community Votes
100% of anonymous learners picked answer D. Votes are pick records left by other test-takers — they are not the verified answer.
Discussion 6 contributions
Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.
From public community threads 6
-
Hs1208 👍 4 Answered DSecure configuration guide (Option D): A secure configuration guide provides detailed instructions and recommendations for configuring systems and devices in a secure manner. It typically includes settings, parameters, and best practices to follow when hardening devices. This aligns with the task of creating baselines for the server team.
-
salah112 👍 3 Answered DD. Secure configuration guide When a security analyst is creating baselines for the server team to follow when hardening new devices for deployment, they are likely creating a document that provides guidelines and recommendations for securely configuring and hardening the devices. This type of document is commonly referred to as a "Secure Configuration Guide."
-
Casperkey 👍 3 Answered DFrom CompTIA Security+ Student Guide - Lesson 1 "Use benchmarks, secure configuration guides, and development best practices as baselines for deploying assets."
-
7308365 👍 1D. After installing an operating system, web server, database server, or almost any other kind of technology, you always want to make sure it has a secure configuration. To make sure it has a secure configuration, you would "harden the system." Through creating baselines for the server team to follow when hardening new devices for deployment, this security analyst is creating secure configuration guides. https://www.professormesser.com/security-plus/sy0-501/secure-configuration-guides/
-
LuckyAro 👍 1 Answered BChat GPT is not always correct !! These are Chat GPT answers and very misleading, we need to study the material. The correct answer is B in my opinion. I think all the knowledgeable guys have left this platform after passing the test ....... I need to leave too ! Lol
Show 1 more comment
-
shady23 👍 1 Answered DD. Secure configuration guide
Reader comments & corrections
No reader corrections yet — spotted an error or have a note? Share it below.