19. Security Baselines and Templates Quiz

What is the primary purpose of security baselines?

• To train employees

• To create a backup of data

• To monitor network traffic

• To improve the attack surface

Which organization is known for creating security baselines and templates?

• IEEE

• ISO

• SANS

• NIST

What type of policy is provided as an example from SANS in the video?

• Incident Response Policy

• Data Retention Policy

• Remote Access Policy

• Password Policy

What is a key requirement for remote access according to the SANS template?

• Multifactor authentication

• Single-factor authentication

• No authentication

• Password-only authentication

What is the purpose of a server security policy?

• To backup server data

• To monitor network traffic

• To improve the security posture of servers

• To manage user accounts

Which two policies are referenced in the server security policy template?

• DMZ and Audit Policy

• Data Retention and Backup Policy

• Access Control and Encryption Policy

• Incident Response and Password Policy

What is CIS known for providing?

• Network equipment

• Software licenses

• Security benchmarks

• Hardware specifications

Which version of Microsoft Windows Server is NOT mentioned in the video?

• 2012

• 2003

• 2016

• 2022

What should be done before applying CIS benchmarks to production systems?

• Ignore them

• Test in a development environment

• Directly apply them to production

• Apply them to all systems simultaneously

Which of the following is NOT a category of security policy templates from SANS?

• Application Security

• Incident Handling

• IoT

• Retired