Exam CCSP topic 1 question 143 discussion

GitHub is a code repository and version control platform, primarily used for storing, managing, and collaborating on code. While it can store configuration files or automation scripts, it does not directly apply or enforce baselines on a system. Why the other options are correct: A. Chef → A configuration management tool that automates system configuration and enforces baselines. C. Puppet → Another configuration management tool used to apply system baselines automatically. D. Active Directory → Used for Group Policy enforcement, which helps enforce security and system configuration baselines.

github is a a sw repository and collaboration tool. Not a control SW tool, the other ones are SW control tools. And yes, you can enforce baselines with AD. GPO- Group Policy Objects & templates.

I think gitHub is the right answer but there are certainly methods were IaC lives in github and it is therefore used as a baseline for building out infrastructure.

Microsoft is releasing security baselines for on-premises Active Directory connected devices using group policies. These are used by many organizations around the globe for decades. Using these security settings, administrators can control the state of the corporate devices and maintain the standards. https://www.rebeladmin.com/2019/08/step-step-guide-apply-security-baselines-windows-10-devices-using-microsoft-intune/

Can we enforce baselines on Active Directory?