Which of the following is the BEST option to reduce the network attack surface of a system?

The correct answer is C. Disabling unnecessary ports and services. The best option to reduce the network attack surface of a system is to disable unnecessary ports and services. The network attack surface of a system is the sum of the points or the areas where an attacker can try to enter, access, or exploit the system over the network, using va

Submitted by ashley.k· Mar 5, 2026Security Architecture and Engineering

Question

Which of the following is the BEST option to reduce the network attack surface of a system?

Options

AEnsuring that there are no group accounts on the system
BRemoving unnecessary system user accounts
CDisabling unnecessary ports and services
DUninstalling default software on the system

How the community answered

(46 responses)

A
9% (4)
B
4% (2)
C
72% (33)
D
15% (7)

Explanation

The best option to reduce the network attack surface of a system is to disable unnecessary ports and services. The network attack surface of a system is the sum of the points or the areas where an attacker can try to enter, access, or exploit the system over the network, using various methods, such as scanning, probing, or attacking. The network attack surface of a system can be reduced by minimizing the exposure and vulnerability of the system to potential attacks, and by enhancing the security and protection of the system against potential attacks. Disabling unnecessary ports and services is an option that can reduce the network attack surface of a system, as it can eliminate or close the unused or unwanted entry points or areas for the attacker, and as it can improve the performance and security of the system.

Topics

#Network attack surface#System hardening#Vulnerability management#Least privilege

Community Discussion

No community discussion yet for this question.

Full CISSP Practice