Baseline configuration is used as the reference state to do what?

• A. Audit compliance against the baseline
• B. Track changes against a known good state
• C. Limit changes to authorized users
• D. Replace the baseline with a newer version

Answer: (B)

Baseline configuration provides a known-good snapshot that serves as the reference state to detect what has changed in the current setup. By comparing live configurations to this baseline, you can identify configuration drift, see unauthorized modifications, and manage changes effectively. That makes tracking changes against a known good state the central purpose of having a baseline.

Auditing against the baseline is related, but it’s a consequence of detecting drift rather than the primary function. Access control and restricting who can change configurations are handled by permissions and policy controls, not by the baseline as the reference state. Updating or replacing the baseline is something you do when you have a new known-good state, but the baseline’s role is to be the reference you compare against, not to be replaced as its purpose.