nerdexam
GIAC

GSEC · Question #172

Which of the following terms is used for the process of securing a system or a device on a network infrastructure?

The correct answer is A. Hardening. Hardening is the security practice of reducing a system's attack surface by disabling unnecessary services, applying patches, and enforcing strict configurations.

Operating System Security

Question

Which of the following terms is used for the process of securing a system or a device on a network infrastructure?

Options

  • AHardening
  • BAuthentication
  • CCryptography
  • DSanitization

How the community answered

(56 responses)
  • A
    80% (45)
  • B
    4% (2)
  • C
    11% (6)
  • D
    5% (3)

Why each option

Hardening is the security practice of reducing a system's attack surface by disabling unnecessary services, applying patches, and enforcing strict configurations.

AHardeningCorrect

System hardening refers to the deliberate process of configuring and securing a host or network device to minimize vulnerabilities - this includes removing default accounts, disabling unused ports and services, applying security benchmarks such as CIS controls, and enforcing least privilege. It is the standard term used across security frameworks for locking down infrastructure components.

BAuthentication

Authentication is the process of verifying the identity of a user or system - it is one component that may be configured during hardening but does not describe the overall process of securing a system.

CCryptography

Cryptography is the science of encoding and protecting information through ciphers and keys - it is a technique used within security, not a term for the broader system-securing process.

DSanitization

Sanitization refers to the secure removal or destruction of data from storage media to prevent recovery - it addresses data disposal, not the configuration and securing of a live system.

Concept tested: System hardening definition and scope

Source: https://csrc.nist.gov/glossary/term/hardening

Topics

#system hardening#network security#device security

Community Discussion

No community discussion yet for this question.

Full GSEC Practice