SY0-301 · Question #711
Jane, a security administrator, wants to harden the web server. Which of the following could she perform to accomplish this task?
The correct answer is B. Disable unnecessary services. Server hardening reduces the attack surface by eliminating unused or unnecessary services that could be exploited by attackers.
Question
Jane, a security administrator, wants to harden the web server. Which of the following could she perform to accomplish this task?
Options
- AImplement remote sanitization
- BDisable unnecessary services
- CInstall mantraps in the datacenter
- DCompare baseline configurations
How the community answered
(25 responses)- B88% (22)
- C8% (2)
- D4% (1)
Why each option
Server hardening reduces the attack surface by eliminating unused or unnecessary services that could be exploited by attackers.
Remote sanitization is a mobile device management concept for wiping data, not a web server hardening technique.
Disabling unnecessary services is a core hardening technique because each running service represents a potential attack vector. Reducing the number of active services limits the ways an attacker can gain access or escalate privileges. This is a foundational principle in server hardening guides such as NIST SP 800-123.
Mantraps are physical access control mechanisms for datacenters, not a method for hardening a web server's software configuration.
Comparing baseline configurations is an auditing and monitoring activity used to detect drift, not an active hardening measure.
Concept tested: Web server hardening by disabling services
Source: https://csrc.nist.gov/publications/detail/sp/800-123/final
Topics
Community Discussion
No community discussion yet for this question.