CompTIA Server+ (SK0-005)Server AdministrationHard
A server administrator is configuring a new server that will host several critical applications. To minimize the attack surface and adhere to security best practices, the administrator should ensure that only essential services and ports are enabled on the server. This practice is known as:
- AHardening
- BLoad balancing
- CNetwork segmentation
- DPrinciple of Least Privilege (PoLP)
Show answer & explanationAnswer & explanation
Correct answer: A. Hardening
Hardening is the process of securing a system by reducing its attack surface, which includes disabling unnecessary services, closing unused ports, removing default accounts, and applying security configurations. This directly addresses the goal of minimizing vulnerabilities on the server.
Why the other options are wrong
- B. Load balancing distributes network traffic across multiple servers to improve performance and availability, not to secure a single server.
- C. Network segmentation divides a network into smaller, isolated segments to control traffic flow and limit the scope of breaches, which is a network-level security measure, not a server-level configuration practice.
- D. Principle of Least Privilege (PoLP) applies to user and process permissions, ensuring they only have the minimum rights necessary, but it's distinct from securing the overall server configuration.
Server Hardening
The process of securing a server by reducing its vulnerabilities and attack surface.
- Disabling unnecessary services and ports.
- Applying security patches and updates.
- Configuring strong authentication and access controls.
Memory trick: Hardening makes the server tough to crack.