CompTIA
SY0-701 · Question #1000
After completing an annual external penetration test, a company receives the following guidance: - Decommission two unused web servers currently exposed to the internet. - Close 18 open and unused…
The correct answer is A. Attack surface reduction. Attack surface reduction involves minimizing the number of exploitable points, such as unused servers, open ports, and publicly exposed contact information, that attackers could target.
Submitted by certguy· Mar 6, 2026Threats, vulnerabilities, and mitigations
Question
After completing an annual external penetration test, a company receives the following guidance:
- Decommission two unused web servers currently exposed to the
internet.
- Close 18 open and unused ports found on their existing production web
servers.
- Remove company email addresses and contact info from public domain
registration records. Which of the following security practices best describes these recommendations?
Options
- AAttack surface reduction
- BVulnerability assessment
- CTabletop exercise
- DBusiness impact analysis
How the community answered
(25 responses)- A88% (22)
- B8% (2)
- D4% (1)
Explanation
Attack surface reduction involves minimizing the number of exploitable points, such as unused servers, open ports, and publicly exposed contact information, that attackers could target.
Community Discussion
No community discussion yet for this question.