What is a baseline configuration and why is it important in Annex F?

• A. A standardized secure configuration across systems; reduces misconfigurations and supports consistent security posture.
• B. A fixed hardware inventory of all devices in the network.
• C. A plan to baseline performance metrics for systems.
• D. A baseline policy for password change frequency.

Answer: (A)

A baseline configuration is a standardized, secure set of configuration settings that defines how a system should be configured. It serves as the reference point used when deploying or auditing systems, so every machine starts from the same secure state. In Annex F, this is important because it ensures consistency across all systems, reduces the chance of misconfigurations that create vulnerabilities, and helps maintain a predictable security posture. It also makes automated configuration management easier and helps quickly detect and correct configuration drift during assessments or audits. The other ideas describe different concepts—hardware inventory, performance baselines, or password-change policies—not the uniform, secure starting point for system configurations.