Is this image joke?
Pretty disappointed to see glaring syntax errors in /etc/pam.d/common-auth and /etc/security/faillock.conf, and these produce actual errors you can see in the system log.
My advice to anyone out there, don't trust these guys at CIS. They just in it for the money.
Thank you for your feedback! We would love to hear more from you on this product. Please visit https://www.cisecurity.org/support and submit a support ticket under “CIS Product Technical Support” to provide additional feedback or engage with CIS support. Thank you!