You have been given the responsibility to ensure the security of your school's web server. As a step towards this, you plan to restrict unnecessary services running on the server. In the context of…

While unnecessary services do consume memory, conserving memory resources is a performance concern, not a security rationale, making this an incorrect justification in the context of web server security.

Every running service represents a potential attack vector; if a service contains an unpatched vulnerability, it can be exploited by an attacker even if that service is not needed for the server's primary function. By disabling unnecessary services, administrators reduce the 'attack surface' - the total number of exploitable entry points - which is a core principle of defense-in-depth and server hardening. This minimizes risk by ensuring that only services essential to operations are exposed.

Hiding software details relates to security through obscurity, which is a weak and secondary security measure; the primary concern with unnecessary services is the vulnerabilities they introduce, not the information they reveal.

Optimizing server speed is a performance and operational concern, not a security objective, and therefore does not correctly explain why restricting unnecessary services is a security best practice.