STIGS are intended to lock down information systems to mitigate what type of risk?

• A. Financial fraud.
• B. Malicious computer attacks.
• C. Data format inconsistencies.
• D. User errors.

Answer: (B)

STIGs provide secure, standardized configurations for information systems to reduce exposure to attackers. By specifying hardened baselines, patching, access controls, logging, and configuration management, STIGs shrink the number of vulnerabilities attackers can exploit and improve detection and response. That directly mitigates malicious computer attacks. Financial fraud relates to monetary deception and isn’t the focus of system hardening. Data format inconsistencies concern data structure rather than security posture. User errors are about human mistakes; STIGs address technical weaknesses that enable exploitation, not user behavior.