nerdexam
(ISC)2

CCSP · Question #316

Devices in the cloud datacenter should be secure against attack. All the following are means of hardening devices, except: Response:

The correct answer is D. Removing all admin accounts. Device hardening involves implementing security best practices such as strong passwords and physical access controls, but completely removing all administrator accounts would render the device unmanageable.

Submitted by ricky.ec· Apr 18, 2026Cloud Platform & Infrastructure Security

Question

Devices in the cloud datacenter should be secure against attack. All the following are means of hardening devices, except:

Response:

Options

  • AUsing a strong password policy
  • BRemoving default passwords
  • CStrictly limiting physical access
  • DRemoving all admin accounts

How the community answered

(25 responses)
  • B
    4% (1)
  • C
    8% (2)
  • D
    88% (22)

Why each option

Device hardening involves implementing security best practices such as strong passwords and physical access controls, but completely removing all administrator accounts would render the device unmanageable.

AUsing a strong password policy

Using a strong password policy is a fundamental hardening measure to prevent unauthorized access through credential guessing or brute-force attacks.

BRemoving default passwords

Removing default passwords is a critical hardening step as default credentials are often publicly known and can be exploited by attackers.

CStrictly limiting physical access

Strictly limiting physical access protects devices from tampering, theft, or unauthorized direct interaction, which is a key aspect of physical security hardening.

DRemoving all admin accountsCorrect

Removing all administrator accounts would make a device unmanageable and inaccessible for legitimate administration tasks, which is counterproductive to maintaining security and operations, rather than a hardening measure.

Concept tested: Device hardening best practices

Source: https://learn.microsoft.com/en-us/azure/security/fundamentals/security-governance#harden-all-network-accessible-operating-systems

Topics

#Device hardening#Security best practices#Cloud infrastructure security

Community Discussion

No community discussion yet for this question.

Full CCSP Practice