312-50V13 · Question #610
You have been given the responsibility to ensure the security of your school's web server. As a step towards this, you plan to restrict unnecessary services running on the server. In the context of…
The correct answer is B. Unnecessary services could contain vulnerabilities; minimize the attack surface. Restricting unnecessary services on a web server is crucial for security because each service could contain vulnerabilities, thereby minimizing the server's attack surface.
Question
Options
- AUnnecessary services eat up server memory; save memory resources.
- BUnnecessary services could contain vulnerabilities; minimize the attack surface.
- CUnnecessary services reveal server software; hide software details.
- DUnnecessary services slow down the server; optimize server speed.
How the community answered
(32 responses)- A3% (1)
- B94% (30)
- D3% (1)
Why each option
Restricting unnecessary services on a web server is crucial for security because each service could contain vulnerabilities, thereby minimizing the server's attack surface.
While unnecessary services consume memory, conserving resources is primarily a performance optimization, not the fundamental security justification for disabling them.
Each running service on a web server represents a potential entry point or a new vector that an attacker could exploit. By disabling services that are not essential for the web server's intended function, the 'attack surface'-the total sum of possible entry points and vulnerabilities-is significantly reduced. This minimizes the pathways available for potential attacks and helps prevent exploits of unneeded software components.
While some services might reveal software details, the primary security benefit of disabling them is to eliminate potential exploitation vectors, not merely to hide information.
Unnecessary services can slow down a server, but optimizing server speed is a performance goal, whereas the core reason for disabling them from a security perspective is to mitigate vulnerabilities.
Concept tested: Server hardening, attack surface reduction
Source: https://learn.microsoft.com/en-us/windows-server/security/server-hardening/server-hardening-guidance
Topics
Community Discussion
No community discussion yet for this question.