STIGs: what are they and why used?

• A. STIGs are network routing protocols.
• B. STIGs are configuration guidelines to securely configure DoD systems; used to standardize secure baselines.
• C. STIGs are encryption standards used for data at rest.
• D. STIGs are user authentication methods.

Answer: (D)

STIGs are Security Technical Implementation Guides published by DoD to provide detailed, repeatable configuration guidelines for securely configuring DoD systems. They create standardized secure baselines by prescribing how to configure operating systems, applications, and services—what to enable, what to disable, patch levels, and specific hardening steps. This makes it easier to deploy consistent, auditable security across the DoD environment and to run automated compliance checks against those baselines. They aren’t about routing protocols, encryption standards for data at rest, or user authentication methods; they focus on securing system configurations to reduce vulnerabilities.