Larry, a security professional in an organization, has noticed some abnormalities In the user accounts on a web server. To thwart evolving attacks, he decided to harden the security of the web server

Question

Options

• AEnable unused default user accounts created during the installation of an OS
• BEnable all non-interactive accounts that should exist but do not require interactive login
• CLimit the administrator or toot-level access to the minimum number of users
• DRetain all unused modules and application extensions

• A
  2% (1)
• B
  3% (2)
• C
  93% (57)
• D
  2% (1)

Explanation

Limiting administrator or root-level access to the minimum number of users is correct. This follows the Principle of Least Privilege - a foundational security hardening practice that reduces the attack surface by ensuring only those who absolutely need elevated privileges have them. The other options all describe insecure practices: Option A says to enable unused default accounts, which should actually be disabled (default accounts are common attack targets). Option B says to enable all non-interactive accounts, but non-interactive accounts that exist without a business need should be disabled, not broadly enabled. Option D says to retain unused modules and extensions, which increases the attack surface and should instead be removed.

No community discussion yet for this question.