nerdexam
EC-Council

312-50V13 · Question #610

You have been given the responsibility to ensure the security of your school's web server. As a step towards this, you plan to restrict unnecessary services running on the server. In the context of…

The correct answer is B. Unnecessary services could contain vulnerabilities; minimize the attack surface. Restricting unnecessary services on a web server is crucial for security because each service could contain vulnerabilities, thereby minimizing the server's attack surface.

Submitted by kevin_r· Mar 6, 2026Hacking Web Servers

Question

You have been given the responsibility to ensure the security of your school's web server. As a step towards this, you plan to restrict unnecessary services running on the server. In the context of web server security, why is this step considered important?

Options

  • AUnnecessary services eat up server memory; save memory resources.
  • BUnnecessary services could contain vulnerabilities; minimize the attack surface.
  • CUnnecessary services reveal server software; hide software details.
  • DUnnecessary services slow down the server; optimize server speed.

How the community answered

(32 responses)
  • A
    3% (1)
  • B
    94% (30)
  • D
    3% (1)

Why each option

Restricting unnecessary services on a web server is crucial for security because each service could contain vulnerabilities, thereby minimizing the server's attack surface.

AUnnecessary services eat up server memory; save memory resources.

While unnecessary services consume memory, conserving resources is primarily a performance optimization, not the fundamental security justification for disabling them.

BUnnecessary services could contain vulnerabilities; minimize the attack surface.Correct

Each running service on a web server represents a potential entry point or a new vector that an attacker could exploit. By disabling services that are not essential for the web server's intended function, the 'attack surface'-the total sum of possible entry points and vulnerabilities-is significantly reduced. This minimizes the pathways available for potential attacks and helps prevent exploits of unneeded software components.

CUnnecessary services reveal server software; hide software details.

While some services might reveal software details, the primary security benefit of disabling them is to eliminate potential exploitation vectors, not merely to hide information.

DUnnecessary services slow down the server; optimize server speed.

Unnecessary services can slow down a server, but optimizing server speed is a performance goal, whereas the core reason for disabling them from a security perspective is to mitigate vulnerabilities.

Concept tested: Server hardening, attack surface reduction

Source: https://learn.microsoft.com/en-us/windows-server/security/server-hardening/server-hardening-guidance

Topics

#web server security#attack surface reduction#unnecessary services

Community Discussion

No community discussion yet for this question.

Full 312-50V13 Practice