Disabling unnecessary services, restricting administrative access, and enabling auditing controls on a server are forms of which of the following?

The correct answer is D. System hardening. System hardening is the process of reducing a system's attack surface by removing or disabling unnecessary services, tightening access controls, applying the principle of least privilege, and enabling logging/auditing. These steps make the system more resistant to attack…

Security operations

Question

Options

AApplication patch management
BCross-site scripting prevention
CCreating a security baseline
DSystem hardening

How the community answered

(36 responses)

A
3% (1)
B
3% (1)
C
8% (3)
D
86% (31)

Explanation

System hardening is the process of reducing a system's attack surface by removing or disabling unnecessary services, tightening access controls, applying the principle of least privilege, and enabling logging/auditing. These steps make the system more resistant to attack. Application patch management (A) focuses on keeping software up to date with patches, not on configuring access or services. Cross-site scripting prevention (B) is a web application security technique unrelated to server configuration. Creating a security baseline (C) is related - a baseline documents the desired secure state - but the act of implementing those configurations is called hardening.

Topics

#system hardening#security baseline#configuration management#hardening controls

Community Discussion

No community discussion yet for this question.

Full SY0-301 Practice