Which of the following is a best practice for system hardening?

The correct answer is C. Removing unnecessary software and services. System hardening reduces the attack surface of a system by eliminating unnecessary features. Removing unnecessary software and services (C) is a core hardening principle - every unneeded application or service is a potential vulnerability that an attacker could exploit. Giving…

Security Operations

Question

Options

AAllowing all users to have administrator privileges
BNone of the above
CRemoving unnecessary software and services
DDisabling automatic updates

How the community answered

(15 responses)

C
93% (14)
D
7% (1)

Explanation

System hardening reduces the attack surface of a system by eliminating unnecessary features. Removing unnecessary software and services (C) is a core hardening principle - every unneeded application or service is a potential vulnerability that an attacker could exploit. Giving all users administrator privileges (A) violates the principle of least privilege. Disabling automatic updates (D) leaves systems exposed to known vulnerabilities. Hardening standards like CIS Benchmarks and DISA STIGs consistently emphasize removal of unused components as a foundational step.

Topics

#System Hardening#Security Best Practices#Attack Surface Reduction#Least Functionality

Community Discussion

No community discussion yet for this question.

Full CERTIFIED-IN-CYBERSECURITY Practice