nerdexam
Dell-EMC

D-ISM-FN-01 · Question #571

What is a function of the application hardening process'?

The correct answer is B. Disable unnecessary application features or services. Application hardening is the process of configuring an application to reduce its attack surface and make it more secure. The process involves several steps, including removing unnecessary features or services, enabling security features, configuring access controls, and…

Storage Security

Question

What is a function of the application hardening process'?

Options

  • APerform penetration testing and validate OS patch management
  • BDisable unnecessary application features or services
  • CIsolate VM network to ensure the default VM configurations are unchanged
  • DValidate unused application files and programs to ensure consistency

How the community answered

(47 responses)
  • A
    13% (6)
  • B
    79% (37)
  • C
    4% (2)
  • D
    4% (2)

Explanation

Application hardening is the process of configuring an application to reduce its attack surface and make it more secure. The process involves several steps, including removing unnecessary features or services, enabling security features, configuring access controls, and implementing secure coding practices. By disabling unnecessary features or services, the application becomes less vulnerable to attacks that exploit these features or services. For example, an application that does not need to run as a privileged user should be configured to run with limited privileges. Additionally, disabling or removing unused or unnecessary application files and programs can help reduce the attack surface. This makes it harder for attackers to exploit vulnerabilities in the application. Penetration testing and patch management are also important components of application hardening, but they are not the primary function of the process.

Topics

#application hardening#security baseline#unnecessary services

Community Discussion

No community discussion yet for this question.

Full D-ISM-FN-01 Practice