Within the context of the CBK, which of the following provides a MINIMUM level of security ACCEPTABLE for an environment ?

Within the context of the CBK, which of the following provides a MINIMUM level of security ACCEPTABLE for an environment ?
A .  A baseline
B .  A standard
C .  A procedure
D .  A guideline

View Answer

Answer: A

Explanation: Baselines provide the minimum level of security necessary throughout the organization.

Standards specify how hardware and software products should be used throughout the organization.

Procedures are detailed step-by-step instruction on how to achieve certain tasks.

Guidelines are recommendation actions and operational guides to personnel when a specific standard does not apply. Source: HARRIS, Shon, All-In-One CISSP Certification Exam Guide,

McGraw-Hill/Osborne, 2002, chapter 3: Security Management Practices (page 94).