nerdexam
CompTIA

SK0-005 · Question #58

An administrator is asked to harden a Linux server after installing the OS. Which of the following should the administrator do FIRST?

The correct answer is A. Install the latest OS patches.. The first and most critical step to harden a Linux server after OS installation is to install the latest OS patches to address known security vulnerabilities.

Security and disaster recovery

Question

An administrator is asked to harden a Linux server after installing the OS. Which of the following should the administrator do FIRST?

Options

  • AInstall the latest OS patches.
  • BSet up a personal firewall.
  • CDisable the HIDS.
  • DEnable WOL.

How the community answered

(41 responses)
  • A
    90% (37)
  • B
    2% (1)
  • C
    2% (1)
  • D
    5% (2)

Why each option

The first and most critical step to harden a Linux server after OS installation is to install the latest OS patches to address known security vulnerabilities.

AInstall the latest OS patches.Correct

Immediately installing the latest OS patches is the foundational first step in hardening any server, as it remediates known security vulnerabilities and bugs, establishing a secure baseline before further configuration.

BSet up a personal firewall.

Setting up a personal firewall is an important hardening step but should typically follow the application of OS patches to ensure the underlying system itself is protected against known exploits first.

CDisable the HIDS.

Disabling a Host Intrusion Detection System (HIDS) would weaken the server's security posture, as HIDS are designed to monitor for malicious activities.

DEnable WOL.

Enabling Wake-on-LAN (WOL) is a power management feature and is not directly related to server hardening; in some cases, if not properly secured, it could even introduce security risks.

Concept tested: Server hardening best practices

Source: https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/security_hardening/index

Topics

#Server hardening#OS patching#Security best practices#Linux security

Community Discussion

No community discussion yet for this question.

Full SK0-005 Practice