Exam 312-50v12 topic 1 question 196 discussion

Actual exam question from ECCouncil's 312-50v12

Question #: 196
Topic #: 1

You have been given the responsibility to ensure the security of your school's web server. As a step towards this, you plan to restrict unnecessary services running on the server. In the context of web server security, why is this step considered important?

A. Unnecessary services eat up server memory; save memory resources.
B. Unnecessary services could contain vulnerabilities; minimize the attack surface.
C. Unnecessary services reveal server software; hide software details.
D. Unnecessary services slow down the server; optimize server speed.

Show Suggested Answer

Suggested Answer: B 🗳️

by DarioReymag at Feb. 6, 2024, 10:38 p.m.

Comments

Submit Cancel

e020fdc

1 month, 4 weeks ago

Selected Answer: B

B, minimize attack surface. Cyber 101

upvoted 1 times

...

prasoonmk

1 year ago

B. Unnecessary services could contain vulnerabilities; minimize the attack surface. Minimizing the number of services running on a web server is a crucial step in securing the system against potential cyber-attacks. Unnecessary services could contain vulnerabilities that might be exploited by attackers to gain unauthorized access or cause disruption. Thus, the primary response to the question at hand is that by limiting these services, we effectively reduce the server's attack surface. This enhances the overall performance and stability of the server environment in addition to helping to block possible entry points for bad actors. Considering the continuous evolution of cyber threats, up-to-date security infrastructure is mandatory, further stressing the necessity to reduce unnecessary services.

upvoted 1 times

...

LordXander

1 year, 3 months ago

Selected Answer: B

Is B, the answer is literally in your face :))

upvoted 1 times

...

insaniunt

1 year, 5 months ago

Selected Answer: B

B. Unnecessary services could contain vulnerabilities; minimize the attack surface.

upvoted 2 times

...

JustAName

1 year, 5 months ago

B, while A is correct as well, but we are suppose to think from a cyber security specialist's perspective. Therefore B is the most accurate answer in this case.

upvoted 2 times

...