Which term refers to a standard set of security controls applied across resources?

Which term refers to a standard set of security controls applied across resources?

• A. Baselines
• B. Security Education
• C. Auditing Requirements and their Frequency
• D. Federal Privacy Act

Answer: (A)

A baseline is a predefined, approved set of security controls that every resource should meet, creating a repeatable and consistent security posture across the environment. By establishing these standard configurations, you can deploy new resources quickly while guaranteeing that essential protections—such as patch levels, access controls, encryption, logging, and firewall settings—are in place from the start. Baselines also make it easier to detect drift and bring resources back into compliance, supporting governance and risk management. This isn’t about training (security education), nor about how often audits occur (auditing requirements and frequency), and it isn’t about privacy law (the Federal Privacy Act). Those serve different roles, while baselines provide the common security controls used across resources.

A baseline is a predefined, approved set of security controls that every resource should meet, creating a repeatable and consistent security posture across the environment. By establishing these standard configurations, you can deploy new resources quickly while guaranteeing that essential protections—such as patch levels, access controls, encryption, logging, and firewall settings—are in place from the start. Baselines also make it easier to detect drift and bring resources back into compliance, supporting governance and risk management.

This isn’t about training (security education), nor about how often audits occur (auditing requirements and frequency), and it isn’t about privacy law (the Federal Privacy Act). Those serve different roles, while baselines provide the common security controls used across resources.