Endpoint baseline draft: - Full-disk encryption should be enabled on all corporate laptops. - Screen lock should activate after 15 minutes of inactivity. - Users should choose strong passwords. Related documents: Policy: Acceptable Use Policy Standard: none Procedure: Laptop imaging steps Guideline: Suggested hardening tips
Based on the exhibit, which document should be created or updated to make these settings mandatory and measurable?
Endpoint baseline draft: - Full-disk encryption should be enabled on all corporate laptops. - Screen lock should activate after 15 minutes of inactivity. - Users should choose strong passwords.
Related documents: Policy: Acceptable Use Policy Standard: none Procedure: Laptop imaging steps Guideline: Suggested hardening tips
Answer choices
Good practice is not just finding the correct option. The wrong answers often show the exact trap the exam wants you to fall into.
Update the policy because policies are always the most detailed technical documents.
Policies set direction and intent, but they are usually too broad to define precise technical baselines.
Create or update a standard because it defines mandatory, specific minimum requirements.
A standard turns high-level intent into enforceable baseline requirements that can be tested and audited consistently.
Update the procedure because procedures are the best place for corporate requirements.
Procedures describe how to perform tasks, not the mandatory organization-wide requirements themselves.
Update the guideline because guidelines are the strongest way to enforce compliance.
Guidelines are optional recommendations, so they are not the right document type for mandatory settings.
Common exam trap
Many certification questions include familiar terms but test a specific constraint. Read the exact wording before choosing an answer that is generally true but wrong for this case.
Technical deep dive
This question should be treated as a scenario, not a definition check. Identify the problem, the constraint and the best action. Then compare each option against those facts.
Related practice questions
Use these pages to review the topic behind this question. This is how one missed question becomes focused revision.
Practise SY0-701 questions linked to Security+ social engineering questions.
Practise SY0-701 questions linked to Security+ cryptography.
Practise SY0-701 questions linked to Security+ IAM questions.
Practise SY0-701 questions linked to Security+ risk management questions.
Practise SY0-701 questions linked to Security+ incident response questions.
Practise SY0-701 questions linked to Security+ malware questions.
Practise SY0-701 questions linked to Security+ vulnerability management questions.
Practise SY0-701 questions linked to Security+ security operations questions.
Practise SY0-701 questions linked to Security+ zero trust questions.
Practise SY0-701 questions linked to Security+ authentication factors questions.
Keep practising from the same exam bank, or move into a focused topic page if this question exposed a weak area.
Question 1
Question 2
Question 3
Question 4
Question 5
Question 6
FAQ
Read the scenario before looking for a memorised answer.
The correct answer is: Create or update a standard because it defines mandatory, specific minimum requirements. — A standard is the correct document type because it defines mandatory, measurable minimum controls such as encryption, lock timing, and password requirements. The policy should state the overall intent, while a procedure would explain how to implement the controls. A guideline would be optional advice, not an enforceable baseline. Since the organization wants these settings to be consistent and auditable, a standard is the proper governance artifact. Why others are wrong: A policy is too broad and is usually written in business terms rather than detailed technical settings. A procedure is step-by-step guidance for performing a task, not the authoritative requirement itself. A guideline is intentionally flexible and advisory, which makes it unsuitable for a mandatory baseline. The question asks for enforceable and measurable requirements, so the answer must be the standard.
Then try more questions from the same exam bank and focus on understanding why the wrong options are tempting.
Sign in to join the discussion.