nerdexam
CompTIA

CV0-003 · Question #371

A systems administrator has uninstalled all but the minimum required services on a VM. This is an example of:

The correct answer is A. hardening the VM. Removing all non-essential services from a VM reduces its attack surface, which is the definition of hardening.

Security

Question

A systems administrator has uninstalled all but the minimum required services on a VM. This is an example of:

Options

  • Ahardening the VM.
  • Bpatching.
  • Crole-based administration.
  • Dfederation.

How the community answered

(33 responses)
  • A
    85% (28)
  • B
    9% (3)
  • C
    3% (1)
  • D
    3% (1)

Why each option

Removing all non-essential services from a VM reduces its attack surface, which is the definition of hardening.

Ahardening the VM.Correct

VM hardening is the process of securing a virtual machine by eliminating unnecessary services, features, and software that could be exploited by attackers. Reducing the installed service footprint to only the minimum required directly minimizes the attack surface, which is a core hardening principle.

Bpatching.

Patching refers to applying software updates and security fixes to existing installed components, not removing services from the system.

Crole-based administration.

Role-based administration (RBAC) is an access control model that grants permissions based on a user's assigned role, unrelated to which services are installed on a VM.

Dfederation.

Federation is an identity and authentication concept that allows trust relationships between separate identity providers or domains, which has no connection to service removal.

Concept tested: VM hardening by minimizing installed services

Source: https://learn.microsoft.com/en-us/azure/security/fundamentals/virtual-machines-overview

Topics

#VM hardening#attack surface reduction#security baseline

Community Discussion

No community discussion yet for this question.

Full CV0-003 Practice