A security manager wants every corporate laptop to use the same mandatory settings, including disk encryption, a 10-minute screen lock, and removal of local administrator rights. Which document should define these specific requirements?

Policy

A policy states the organization’s intent and high-level expectations, but it usually does not list exact technical settings for every device. It is too broad for detailed configuration values.

Guideline

Guidelines are recommendations and best practices, not mandatory settings. They may help users or administrators choose secure options, but they are not appropriate for requirements that must be enforced everywhere.

Procedure

A procedure explains the step-by-step method for performing a task. It may reference the required settings, but it is not the right document to define the settings themselves.

What does this SY0-701 question test?

Authentication checks who the user is.

What is the correct answer to this question?

The correct answer is: Standard — A standard is the best fit because the organization wants specific, mandatory controls applied consistently to all laptops. Standards are used to define measurable requirements such as encryption, timeout values, and admin privilege rules. That allows security teams to audit compliance and reduce ambiguity for administrators. The policy can state the broader security objective, while the standard gives the exact technical baseline. Why others are wrong: A policy is too high-level for exact values, a guideline is optional rather than mandatory, and a procedure is a step-by-step work instruction. The question asks which document should define the required settings themselves, so the answer is the standard, not the supporting documents around it.

What should I do if I get this SY0-701 question wrong?

Then try more questions from the same exam bank and focus on understanding why the wrong options are tempting.