Is this image joke?
Pretty disappointed to see glaring syntax errors in /etc/pam.d/common-auth and /etc/security/faillock.conf, and these produce actual errors you can see in the system log.
My advice to anyone out there, don't trust these guys at CIS. They just in it for the money.