thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Security Operations · Intermediate

Security Benchmark

A consensus-based configuration standard specifying secure settings for systems and applications.

Definition

Benchmarks such as CIS Benchmarks and DISA Security Technical Implementation Guides (STIGs) define hardening settings. Compliance scans compare systems to benchmarks and report deviations. Organizations tailor benchmarks to their needs.

Example

Applying the CIS Microsoft Windows Server 2022 Level 1 benchmark to all servers.

Exam tip

Configuration drift from a benchmark is a vulnerability finding even without a CVE.

Related terms