Correct Answer: Properly configured NTP and DNS, a restrictive SSH access list, an appropriate login banner, health monitoring enabled with alerting, and proactive certificate renewal tracking
Explanation: A secure, well-monitored baseline combines accurate time/DNS, restricted management access, an appropriate banner, active health monitoring, and certificate renewal tracking, unlike leaving NTP/DNS unconfigured with open SSH access, disabling health monitoring, skipping banners and certificate tracking, restricting SSH while ignoring time sync, or disabling alerting entirely.
Correct Answer: Properly configured NTP and DNS, a restrictive SSH access list, an appropriate login banner, health monitoring enabled with alerting, and proactive certificate renewal tracking
Explanation: A secure, well-monitored baseline combines accurate time/DNS, restricted management access, an appropriate banner, active health monitoring, and certificate renewal tracking, unlike leaving NTP/DNS unconfigured with open SSH access, disabling health monitoring, skipping banners and certificate tracking, restricting SSH while ignoring time sync, or disabling alerting entirely.