nerdexam
EC-Council

312-50V12 · Question #18

Larry, a security professional in an organization, has noticed some abnormalities in the user accounts on a web server. To thwart evolving attacks, he decided to harden the security of the web…

The correct answer is B. Limit the administrator or root-level access to the minimum number of users. Limiting the administrator or root-level access to the minimum number of users is a best practice for securing user accounts on a web server. This helps to reduce the attack surface and minimize the risk of unauthorized access or privilege escalation.

Submitted by skyler.x· Mar 4, 2026Fundamentals

Question

Larry, a security professional in an organization, has noticed some abnormalities in the user accounts on a web server. To thwart evolving attacks, he decided to harden the security of the web server by adopting a few countermeasures to secure the accounts on the web server. Which of the following countermeasures must Larry implement to secure the user accounts on the web server?

Options

  • ARetain all unused modules and application extensions.
  • BLimit the administrator or root-level access to the minimum number of users.
  • CEnable all non-interactive accounts that should exist but do not require interactive login.
  • DEnable unused default user accounts created during the installation of an OS.

How the community answered

(33 responses)
  • A
    6% (2)
  • B
    91% (30)
  • C
    3% (1)

Explanation

Limiting the administrator or root-level access to the minimum number of users is a best practice for securing user accounts on a web server. This helps to reduce the attack surface and minimize the risk of unauthorized access or privilege escalation.

Topics

#Web server hardening#Account security#Principle of least privilege#Security best practices

Community Discussion

No community discussion yet for this question.

Full 312-50V12 Practice