Exam CCSP topic 1 question 296 discussion

The answer C is correct, because A,B,D they have nothing to do with baselines, the only term that fits is standardization

Question is sacrificially asking about "specifically baselines" , Systems can adrift from baseline due to maintenance (Patch , upgrades etc). so A is the correct answer. "in SaaS Maintenance and versioning of all parts is the responsibility of the CSP" per cbk 3rd ed, page 21. Standardization is not really Cloud concept. its very general term.

One of the key advantages of Software as a Service (SaaS) is standardization, which helps organizations align with industry best practices and compliance baselines. SaaS providers often follow established frameworks (e.g., ISO 27001, SOC 2, HIPAA) and apply consistent security controls across all customers, reducing the compliance burden on individual organizations. Why Not the Others? A. Maintenance: While SaaS providers handle maintenance, this does not directly address compliance baselines. B. Licensing: Licensing deals with software usage rights, not compliance management. D. Development: SaaS users do not manage application development, so this is unrelated to compliance baselines.

In a SaaS model, standardization refers to the consistent application of configurations, security baselines, and operational practices across the service. SaaS providers typically adhere to industry standards and regulatory frameworks (e.g., GDPR, HIPAA, PCI DSS) to maintain compliance, alleviating the need for individual organizations to develop and enforce these baselines themselves. A,B,D have NOTHING to do with baselines.

C. Standardization. SaaS providers often follow industry standards and regulations, which means that many compliance requirements, such as security baselines, are already integrated into the service. This standardization can significantly reduce the time and effort organizations spend on compliance.

Baselines are policy, guideline, procedure, and standard. Only policy is mandatory.

C: Standardization

I vote for A. Patching correctly is a really time consuming effort!!!

The answer is correct but in the explanation the licensing is done by CSP not Customer.