Exam CS0-002 topic 1 question 95 discussion

B. by removing unnecessary stuff, you reduce the attack surface.

The security analyst's goal is to reduce the attack surface by disabling unneeded, benign services that are currently running as part of the standard OS deployment for workstations. Attack surfaces refer to the various entry points that an attacker can use to exploit a system or network. By reducing the number of services that are running, the analyst is reducing the number of potential entry points for an attacker, thus making the system or network more secure. A system baseline refers to the standard configuration of a system or network, which is used as a reference for identifying deviations from normal behavior. Improving malware detection refers to taking steps to increase the ability to detect malware infections. Optimizing system performance refers to improving the efficiency and speed of a system or network. These are not the primary goals of disabling unneeded services in this scenario.

the list of unneeded, benign services are part of standard "that are currently running as part of the standard OS deployment for workstations." and he wants to create policy (The analyst will provide this list to the operations team to create a policy that will automatically disable the services for all workstations in the organization.)

certainly B

To reduce the attack surface is the best answer.

Reducing the Attack Surface Area Reducing the attack surface area means limiting the features and functions that are available to an attacker. For example, if I lock all doors to the facility with the exception of one, I have reduced the attack surface. Another term for reducing the attack surface area is system hardening because it involves ensuring that all systems have been hardened to the extent that is possible and still provide functionality

B is correct.

agreed. B