nerdexam
(ISC)2

CCSP · Question #416

What is the best approach for dealing with services or utilities that are installed on a system but not needed to perform their desired function?

The correct answer is A. Remove. The best practice is to totally remove any unneeded services and utilities on a system to prevent any chance of compromise or use. If they are just disabled, it is possible for them to be inadvertently started again at any point, or another exploit could be used to start them…

Submitted by neha2k· Apr 18, 2026Cloud Platform & Infrastructure Security

Question

What is the best approach for dealing with services or utilities that are installed on a system but not needed to perform their desired function?

Options

  • ARemove
  • BMonitor
  • CDisable
  • DStop

How the community answered

(31 responses)
  • A
    74% (23)
  • B
    6% (2)
  • C
    3% (1)
  • D
    16% (5)

Explanation

The best practice is to totally remove any unneeded services and utilities on a system to prevent any chance of compromise or use. If they are just disabled, it is possible for them to be inadvertently started again at any point, or another exploit could be used to start them again. Removing also negates the need to patch and maintain them going forward.

Topics

#Least functionality#Attack surface reduction#System hardening#Security best practices

Community Discussion

No community discussion yet for this question.

Full CCSP Practice