CompTIA Tech+ (FC0-U71)SecurityMedium
A technician is configuring a new network device. To enhance its security, the technician disables unused ports and services, changes default credentials, and updates the firmware. Which security practice is the technician performing?
- ADevice Hardening
- BRedundancy
- CPenetration Testing
- DIntrusion Detection
Show answer & explanationAnswer & explanation
Correct answer: A. Device Hardening
Device hardening involves configuring a system to reduce its attack surface and improve its security posture by eliminating unnecessary functionalities and applying security best practices.
Why the other options are wrong
- B. Redundancy involves duplicating critical components to prevent single points of failure, which is a different security goal.
- C. Penetration testing is simulating an attack to find vulnerabilities, not the act of securing the device itself.
- D. Intrusion detection is monitoring for malicious activity, not the proactive configuration of the device to prevent attacks.
Device Hardening
The process of securing a system by reducing its attack surface, eliminating unnecessary functionalities, and applying security best practices.
- Reduces vulnerabilities
- Involves disabling unused services/ports
- Includes changing default credentials and updating firmware
Memory trick: Best practices make systems strong and secure.