Cisco Certified Support Technician (CCST) CybersecurityEndpoint SecurityEasy
A security administrator is configuring a new server. To minimize its attack surface, they are ensuring that only essential services and applications are installed and running, and all unnecessary ports are closed. This practice aligns with which security principle?
- ASeparation of Duties
- BLeast Privilege
- CDefense in Depth
- DLeast Functionality
Show answer & explanationAnswer & explanation
Correct answer: D. Least Functionality
Least functionality dictates that systems should be configured with only the essential functions, services, and applications required for their purpose, thereby reducing the attack surface and potential vulnerabilities.
Why the other options are wrong
- A. Separation of duties is about dividing critical tasks among multiple individuals to prevent fraud or error.
- B. Least privilege relates to user or process permissions, not the overall functionality of a system.
- C. Defense in depth involves multiple layers of security, not specifically limiting functionality.
Least Functionality
A security principle requiring that systems, applications, and services be configured to provide only the minimum necessary functions to perform their intended purpose.
- Reduces the attack surface.
- Minimizes potential vulnerabilities.
- Involves disabling unnecessary services and closing unused ports.
Memory trick: Least Functionality: 'Less is more' for security.