4.1 Application Security Baselines and Deployment

Question 1

What is the purpose of establishing a security baseline when deploying an application?

Answer 1

To ensure that all associated security best practices are implemented and the application instance is as secure as possible.

The baseline must be constantly checked to ensure it remains in place.

Question 2

What types of components are typically included in the security settings for an application deployment?

Answer 2

• Underlying operating system
• Network devices
• Firewall settings
• Configuration settings within the application itself

These components are essential for ensuring comprehensive security.

Question 3

What is the recommended course of action if a check reveals that an application instance is not adhering to its security baseline?

Answer 3

Put together a plan to correct the deviations as soon as possible.

The goal is to ensure the baselines are in place and actively protecting the application.

Question 4

Where can organizations find foundational security baselines to use as a starting point?

Answer 4

From the application developer, the operating system manufacturer, or manufacturers of any purpose-built appliances being used.

Organizations do not have to create baselines from scratch.

Question 5

What is the Microsoft Security Compliance Toolkit (SCT), and what function does it serve?

Answer 5

A set of tools provided by Microsoft to help organizations deploy security baselines for Windows and Windows Server operating systems.

The SCT aids in streamlining the deployment process.

Question 6

Why is automation considered important when deploying complex security baselines?

Answer 6

Because security baselines can be large and complex, with thousands of potential settings, making automated processes necessary for consistent and efficient deployment.

For example, Windows 10 has over 3,000 Group Policy settings.

Question 7

Besides centralized consoles like the SCT, what other methods can be used to push security settings to devices?

Answer 7

• Active Directory Group Policy
• Mobile Device Management (MDM) systems

These methods facilitate broader security settings deployment across networks and devices.

Question 8

What are three distinct circumstances that might require an existing security baseline to be updated?

Answer 8

• A new vulnerability is discovered
• The application itself is updated
• A completely new operating system is installed

These updates are crucial for maintaining security.

Question 9

What potential issue can arise when using security baselines from multiple different manufacturers for a single application instance?

Answer 9

A conflict can arise where one manufacturer’s recommended baseline contradicts another’s.

Both baselines must be evaluated to determine which one is better for that specific application instance.

Question 10

What two processes are recommended before and after deploying a baseline to ensure its effectiveness?

Answer 10

• Test the baselines before deployment
• Audit the systems after deployment

This ensures that the baselines remain in effect.