Question

Difficulty: EasyWorkstation Hardening and Best Practices

A network technician is preparing a newly imaged desktop computer for deployment in an accounting office. To minimize the workstation's attack surface against potential network-based threats, which security hardening best practice should the technician implement?

  1. Disable unneeded background services and close unused network ports.Answer
  2. B
    Leave all default services running to ensure maximum system application compatibility.
  3. C
    Use Event Viewer to actively inspect and block open port connection attempts in real time.
  4. D
    Install a physical privacy filter on the display monitor to block inbound network attacks.

Answer

Disable unneeded background services and close unused network ports.
Disabling unneeded services and closing unrequired open ports is a fundamental workstation hardening practice that reduces the operating system's attack surface, preventing remote exploitation of unneeded components.

Step-by-Step Solution

1
Identify the primary objective of attack surface reduction for workstation hardening.
Recognize that minimizing running services and network listeners limits exposure to unauthorized access.
Every active service or open network port represents a potential entry point for unauthorized users or malware.
2
Evaluate the administrative options against system security hardening best practices.
Determine that turning off unnecessary services and unneeded open ports reduces system vulnerabilities.
Closing unused communication channels directly strengthens system security posture.

Key Concept

Attack Surface Reduction
Rate this question