36. An organization would like to ensure its cloud infrastructure has a hardened configuration. A requirement is to create a server image that can be deployed with a secure template. Which of the following is the best resource to ensure secure configuration?
Answer: A
CIS benchmarks
CIS benchmarks provide a comprehensive set of best practices for securely configuring systems, applications, and network devices. Utilizing these benchmarks ensures that the server image adheres to industry-recognized security standards, making it the best resource for achieving a hardened configuration.
A) CIS benchmarks
CIS benchmarks are specifically designed to guide organizations in securing their configurations through detailed guidelines and recommendations. They cover various platforms and applications, making them highly applicable for creating secure server images to be deployed in cloud environments.
B) PCI DSS
While PCI DSS provides a framework for securing payment card information, it is not focused solely on server configuration. Its requirements are more relevant to compliance for organizations handling credit card transactions and do not specifically address the creation of secure server images.
C) OWASP Top 10
The OWASP Top 10 is a list of the most critical web application security risks. Although it is valuable for addressing application security vulnerabilities, it does not provide specific guidance on server configuration or image creation, making it less suitable for the requirement at hand.
D) ISO 27001
ISO 27001 is an information security management standard that outlines a systematic approach to managing sensitive company information. However, it is broader in scope and does not provide the detailed, practical configuration guidelines necessary for creating secure server images compared to CIS benchmarks.
Conclusion
CIS benchmarks stand out as the most effective resource for ensuring secure configurations in cloud infrastructure, as they focus directly on system hardening practices. In contrast, PCI DSS, OWASP Top 10, and ISO 27001, while important in their respective domains, do not specifically address the needs related to crafting secure server images. Thus, CIS benchmarks are the definitive choice for this requirement.