What is an effective way of hardening a system?

The correct answer is C. Patch the system. According to NIST SP 800-152, hardening is defined as the process of eliminating the means of an attack by simultaneously patching vulnerabilities and turning off nonessential services. The ISC2 Study Guide, chapter 5, module 2, under Configuration Management Overview, reads…

Security Operations

Question

Options

ARun a vulnerability scan
BCreate a DMZ for web application services
CPatch the system
DHave an IDS in place

How the community answered

(36 responses)

A
3% (1)
B
6% (2)
C
89% (32)
D
3% (1)

Explanation

According to NIST SP 800-152, hardening is defined as the process of eliminating the means of an attack by simultaneously patching vulnerabilities and turning off nonessential services. The ISC2 Study Guide, chapter 5, module 2, under Configuration Management Overview, reads "One of the best ways to achieve a hardened system is to have updates, patches, and service packs installed automatically". Vulnerability scans and IDS do not eliminate the means of an attack. The DMZ does not eliminate vulnerabilities in a system.

Topics

#System Hardening#Patch Management#Vulnerability Management#Security Best Practices

Community Discussion

No community discussion yet for this question.

Full CERTIFIED-IN-CYBERSECURITY Practice