Exam CISA topic 1 question 969 discussion

The best way to reduce the attack surface for a server farm is to uninstall unnecessary applications and services. By minimizing the number of installed applications and services, you reduce the potential entry points and vulnerabilities that attackers can exploit. This practice is often referred to as "least privilege" or "principle of least privilege," where only the necessary components are installed and running.

B. Uninstall unnecessary applications and services. Uninstall unnecessary applications and services: This is the best option because it directly reduces the attack surface by removing software and services that are not needed. Fewer applications and services mean fewer potential points of entry for attackers, making the environment more secure. In practice, a combination of these measures is typically used to enhance server farm security. However, if you had to choose the single "BEST" way to reduce the attack surface, uninstalling unnecessary applications and services would be the most effective initial step.