CompTIA: Advanced Security Practitioner (CASP) Exam Prep

Answer: C - Baselining is the process of establishing a standard for security.

Key Takeaway: With respect to security, baselining starts by measuring normal activity on a network or network device. That measurement is used as threshold-or baseline-to detect unusual patterns or changes in levels of activity. Henceforth, a security expert can focus efforts on evaluating anomalies, or differences from the baseline measurements, instead of looking for them by reviewing huge log files. It can also refer to the results of an organization’s first security assessment. This becomes the baseline against which the organization measures improvements or any other types of changes.