How often should a configuration baseline be updated?

How often should a configuration baseline be updated?

• A. Only once after installation
• B. After a software upgrade or service pack deployment
• C. Monthly, regardless of changes
• D. After incidents occur

Answer: (B)

A configuration baseline should be updated after a software upgrade or service pack deployment because these actions typically introduce significant changes to the system. Establishing a new baseline post-upgrade ensures that the updated configuration reflects the current state of the system, including new features, patched vulnerabilities, or modified settings. It allows organizations to maintain an accurate record of their configurations, which is crucial for effective security management, compliance checks, and systems auditing. While it is also important to consider updates after incidents or to have a regular schedule, the most relevant and critical time to establish a new baseline is immediately following changes that impact the system's configuration.

A configuration baseline should be updated after a software upgrade or service pack deployment because these actions typically introduce significant changes to the system. Establishing a new baseline post-upgrade ensures that the updated configuration reflects the current state of the system, including new features, patched vulnerabilities, or modified settings. It allows organizations to maintain an accurate record of their configurations, which is crucial for effective security management, compliance checks, and systems auditing.

While it is also important to consider updates after incidents or to have a regular schedule, the most relevant and critical time to establish a new baseline is immediately following changes that impact the system's configuration.