What is a standard configuration and policy set that is applied to systems and virtual machines called?

A baseline is a standardized configuration used as a reference point for building and managing systems, including virtual machines. It defines a known-good state for a system's security settings, software, and policies. Applying a baseline ensures consistency across an environment, simplifies audits, and provides a foundation for further security hardening. It is a fundamental concept in configuration management and operational security.

A. Standardization: This is the process of developing and implementing standards, not the resulting configuration set itself.

C. Hardening: This is the active process of securing a system by reducing its attack surface, which often involves applying a baseline.

D. Redline: This term is unrelated to system configuration; it typically refers to marking edits in a document.

1. National Institute of Standards and Technology (NIST). (2020). Security and Privacy Controls for Information Systems and Organizations (NIST Special Publication 800-53, Rev. 5). Section 2.3, "Baselines and Tailoring," p. 13. https://doi.org/10.6028/NIST.SP.800-53r5

2. National Institute of Standards and Technology (NIST). (2013). Guide for Security-Focused Configuration Management of Information Systems (NIST Special Publication 800-128). Section 2.2, "Configuration Baselines," p. 8. https://doi.org/10.6028/NIST.SP.800-128