A company wants every corporate laptop to use the same required screen-lock timeout, disk encryption setting, and local administrator restriction. Which document should define these mandatory settings?

A guideline, because it offers flexible suggestions for users

Guidelines are optional recommendations, not mandatory settings for all laptops.

A procedure, because it explains the business reason for security rules

Procedures describe step-by-step tasks, not the organization-wide required configuration itself.

A memo, because it is the fastest way to communicate changes

A memo can announce a change, but it does not serve as the formal control document.

What does this SY0-701 question test?

Read the scenario before looking for a memorised answer.

What is the correct answer to this question?

The correct answer is: A standard, because it specifies required configuration values — A standard is the correct document for mandatory technical settings such as encryption, timeout values, and local admin restrictions. Standards turn high-level policy into specific, measurable requirements that administrators can implement consistently. Policies state the intent, but standards define the exact baseline. Procedures explain how to carry out tasks, while guidelines offer optional advice. For this scenario, the organization needs a required configuration baseline, which is exactly what a standard provides. Why others are wrong: Guidelines are helpful suggestions, but they are not enforceable requirements. Procedures explain how to perform work, such as deploying the settings, but they do not define the settings themselves. A memo may communicate the change to staff, yet it is not the governing document for mandatory security configuration.

What should I do if I get this SY0-701 question wrong?

Then try more questions from the same exam bank and focus on understanding why the wrong options are tempting.