nerdexam
CompTIA

SK0-004 · Question #821

After security settings were applied, an application will no longer start on a server. However, users are still able to access the server remotely. Which of the following is MOST likely causing the…

The correct answer is A. A necessary service was disabled. Security hardening frequently disables services deemed non-essential, and if a disabled service is a required dependency for an application, that application will fail to start while unrelated functions like remote access remain operational.

Troubleshooting

Question

After security settings were applied, an application will no longer start on a server. However, users are still able to access the server remotely. Which of the following is MOST likely causing the issue?

Options

  • AA necessary service was disabled
  • BPort security was tripped
  • CThe application was uninstalled
  • DThe DNS settings were changed

How the community answered

(29 responses)
  • A
    76% (22)
  • B
    14% (4)
  • C
    3% (1)
  • D
    7% (2)

Why each option

Security hardening frequently disables services deemed non-essential, and if a disabled service is a required dependency for an application, that application will fail to start while unrelated functions like remote access remain operational.

AA necessary service was disabledCorrect

Security configuration benchmarks such as CIS Benchmarks or STIG guidelines disable many services as part of attack surface reduction, but an application may depend on one of those services to initialize properly. Because remote access relies on separate services (such as RDP or SSH listeners) that were not disabled, users can still connect to the server while the application itself cannot start due to its missing service dependency.

BPort security was tripped

Port security being tripped would block or restrict network-level traffic, which would also prevent users from accessing the server remotely - contradicting the stated scenario.

CThe application was uninstalled

Applying security settings does not uninstall applications; if the application were uninstalled the binary would be missing entirely rather than failing to start.

DThe DNS settings were changed

Changing DNS settings affects outbound name resolution, not the local startup sequence of an application running on the server itself.

Concept tested: Service dependency failure after security hardening

Source: https://learn.microsoft.com/en-us/windows-server/security/windows-services/security-guidelines-for-disabling-system-services-in-windows-server

Topics

#service dependencies#security hardening#application startup#service management

Community Discussion

No community discussion yet for this question.

Full SK0-004 Practice