sure thing
it's set to Proactive Security
Image Execution-> normal
D+ -> safe mode
trust the applications.... ticked
monitor settings -> everything ticked
I find CIS passes everything even in Clean PC Mode, as long as Proactive Configuration is selected.