nerdexam
CompTIA

CV0-002 · Question #371

A systems administrator has uninstalled all but the minimum required services on a VM. This is an example of:

The correct answer is A. hardening the VM. Uninstalling all but the minimum required services on a VM is a security practice aimed at reducing its vulnerability to attacks.

Security

Question

A systems administrator has uninstalled all but the minimum required services on a VM. This is an example of:

Options

  • Ahardening the VM.
  • Bpatching.
  • Crole-based administration.
  • Dfederation.

How the community answered

(20 responses)
  • A
    95% (19)
  • D
    5% (1)

Why each option

Uninstalling all but the minimum required services on a VM is a security practice aimed at reducing its vulnerability to attacks.

Ahardening the VM.Correct

Hardening a VM involves implementing security measures to reduce its attack surface and vulnerability to threats. Uninstalling all but the minimum required services directly contributes to hardening by removing unnecessary software components that could potentially be exploited, thereby minimizing potential entry points for attackers.

Bpatching.

Patching refers to applying updates or fixes to software, typically to address bugs or security vulnerabilities, rather than the complete removal of non-essential services.

Crole-based administration.

Role-based administration (RBA) is a security concept where access permissions are granted based on a user's role, not a method for securing a system by uninstalling services.

Dfederation.

Federation involves establishing trust relationships between different identity providers or systems to enable single sign-on or shared resource access, which is unrelated to the process of securing a single VM by removing services.

Concept tested: Server/VM hardening

Source: https://learn.microsoft.com/en-us/windows-server/security/security-assurance/reducing-the-attack-surface

Topics

#VM hardening#security best practices#minimal services

Community Discussion

No community discussion yet for this question.

Full CV0-002 Practice