Study. uk . com
  1. Home
  2. All questions
  3. Question 215

CompTIA Security+ study material · question 215 of 611

An organisation's hardening standard was written for an operating system version no longer deployed. What has happened to it?

  1. It has silently stopped being enforceable
  2. It now applies at a higher impact level
  3. It has become an overlay
  4. It has become a compensating control
Show the answer

Answer: A. It has silently stopped being enforceable

A baseline must be maintained as well as applied, or the checks it defines no longer map to the running systems.

Source: NIST SP 800-53 Rev. 5 (NIST) — SP 800-53r5 › CM-2 Baseline Configuration

Challenge yourself on this topic → Study as cards