Examkin

Question

Difficulty: EasyHost, Network, and Architecture Vulnerabilities

A security technician is preparing to deploy a new server host into an enterprise network. To reduce common host-based vulnerabilities and strengthen the system's baseline security posture, which of the following hardening actions should the technician implement? (Select TWO).

  1. Disable unnecessary network ports and unneeded background servicesAnswer
  2. Change default vendor administrative passwords to strong, unique credentialsAnswer
  3. C
    Deploy network-level IPsec encryption to mitigate Cross-Site Scripting (XSS) vulnerabilities
  4. D
    Configure host interfaces to implicitly trust all incoming traffic originating from internal network subnets
  5. E
    Reclassify technical endpoint security software as a physical security control

Answer

Disabling unnecessary network ports and unneeded background services, and changing default vendor administrative passwords to strong, unique credentials.
Hardening host infrastructure requires reducing exposed entry points by closing unused network ports/services and enforcing proper credential management by removing default passwords.

Step-by-Step Solution

1
Identify effective host-hardening practices that directly minimize host vulnerability.
Disabling unneeded ports/services minimizes entry points for potential exploits.
Host attack surface reduction is a foundational security baseline practice.
2
Evaluate default account configuration management on new systems.
Changing default credentials prevents known administrative password exploitation.
Default credentials are widely documented and actively targeted by malicious actors.

Key Concept

Host Hardening and Attack Surface Reduction
Rate this question

Topics

Host, Network, and Architecture Vulnerabilities