ISC2 CC Security Operations Practice Question
An organization implements a security baseline using CIS Benchmarks for all new servers. After a routine scan, a server is found to have a configuration that deviates from the baseline. The deviation was introduced by a system administrator to resolve a performance issue. What is the best course of action?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Document the change and submit it through the change control process
Any change to a security baseline should go through the change control process to ensure it is reviewed and approved, preventing unauthorized changes that could introduce vulnerabilities.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Ignore the deviation since it was done for a valid reason
Why it's wrong here
Ignoring deviations can lead to security gaps.
- ✗
Revert the change immediately without discussion
Why it's wrong here
Reverting without understanding the performance issue may cause operational problems.
- ✗
Update the baseline to match the new configuration
Why it's wrong here
Updating the baseline without analysis could lower security standards.
- ✓
Document the change and submit it through the change control process
Why this is correct
Change control ensures changes are reviewed, approved, and documented.
Visual reference
Go deeper
Related to this question
Learn chapter
Introduction to Security Principles
Key term
Security baseline
A security baseline is a documented minimum set of security configurations and settings that must be applied to a system, device, or network to ensure a known secure starting point.
Key term
Baseline
A baseline is a documented starting point for the normal performance and behavior of a system, network, or component, used to detect changes and troubleshoot issues.
About these practice questions
Courseiva writes every CC question from scratch — 976 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CC practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CC exam.