During a penetration test, the tester identifies several unused services that are listening on all targeted internal laptops: Which of the following technical controls should the tester recommend to r

The correct answer is C. System hardening. Disabling or removing unused services on each laptop is a core hardening measure that reduces the available attack surface and prevents attackers from exploiting unnecessary listening ports.

Submitted by lars.no· Mar 6, 2026Vulnerability Discovery and Analysis

Question

During a penetration test, the tester identifies several unused services that are listening on all targeted internal laptops:

Which of the following technical controls should the tester recommend to reduce the risk of compromise?

Exhibit

Options

AMultifactor authentication
BPatch management
CSystem hardening
DNetwork segmentation

How the community answered

(43 responses)

A
9% (4)
B
5% (2)
C
84% (36)
D
2% (1)

Explanation

Disabling or removing unused services on each laptop is a core hardening measure that reduces the available attack surface and prevents attackers from exploiting unnecessary listening ports.

Topics

#system hardening#vulnerability management#service enumeration#risk reduction

Community Discussion

No community discussion yet for this question.

Full PT0-003 Practice