easyMultiple ChoiceObjective-mapped

200-201 The purpose of a security baseline? Practice Question

What is the purpose of a security baseline?

⚠ Common exam trap

Cisco often tests the distinction between a security baseline (a static reference standard) and operational security controls (like incident response or encryption), leading candidates to confuse the baseline with the tools or processes that enforce or detect security issues.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

To define the minimum acceptable security posture

A security baseline defines the minimum acceptable security posture for systems, networks, and devices. It establishes a standard configuration that must be met to ensure a consistent level of security across the organization, such as requiring specific patch levels, disabling unnecessary services, and enforcing password policies. Without a baseline, there is no reference point to measure compliance or identify deviations that could indicate a security weakness.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

✓
To define the minimum acceptable security posture
Why this is correct
Baselines establish secure configurations.
✗
To respond to security incidents
Why it's wrong here
Incident response is a separate process.
✗
To encrypt sensitive data
Why it's wrong here
Encryption is a control, not a baseline.
✗
To detect malware infections
Why it's wrong here
Detection is done by security tools, not the baseline.

Go deeper

200-201 The purpose of a security baseline? Practice Question

Why each option matters

Option-by-option breakdown

Related to this question