What term best describes an ongoing process that evaluates the system or its users?

• A. Baseline
• B. Monitoring Control
• C. Change Management
• D. Metrics

Answer: (B)

Monitoring control refers to continuously observing the environment to detect events, policy violations, or performance issues, and to assess the current state of the system and user activity. This ongoing evaluation enables timely detection and response to security incidents and compliance checks, making it the best fit for an ongoing process that evaluates the system or its users. Baseline is a reference state used for comparisons, not an ongoing activity. Metrics are measurements collected to quantify aspects of security or performance, but they are data points rather than the act of continuous evaluation. Change management governs how changes are requested and approved, not the continuous supervision of the environment. So the concept that matches the description is monitoring control.