Restricting Services on Web Servers
Short answer
B Restricting unnecessary services minimizes the attack surface by removing potential vulnerabilities.
Question
Key Takeaways
The exam tests the understanding of 'minimizing the attack surface' as the primary security rationale for service reduction, distinguishing it from performance or resource optimization concerns.
This question addresses the critical practice of minimizing services on a web server to reduce potential entry points for attackers. It establishes that limiting running services is primarily done to minimize the attack surface by removing unnecessary vulnerabilities.
Common mistake: Learners often select option A (saving memory) or D (optimizing speed), focusing on operational efficiency rather than the security imperative of reducing exploitable vulnerabilities.
Expert Analysis
Why the Answer Is Correct
Option B is correct because every active service represents a potential vector for exploitation. By restricting unnecessary services, you directly reduce the number of open ports and applications that could contain unpatched vulnerabilities, thereby minimizing the overall attack surface.
Why the Other Options Are Wrong
Options A and D focus on performance and resource management, which are secondary benefits but not the primary security motivation. Option C refers to information hiding, which is a defense-in-depth tactic but less critical than removing vulnerable code paths entirely.
Community Comment Notes
The community overwhelmingly agrees with B, noting that while saving memory is true, the security perspective prioritizes vulnerability reduction. As one user noted, "we are suppose to think from a cyber security specialist's perspective," highlighting the need to prioritize risk over resources.
Exam Strategy
Always prioritize security outcomes over operational efficiency when answering questions about hardening systems. Look for keywords like 'attack surface', 'vulnerability', and 'risk' to guide your selection.
Frequently Asked Questions
Is saving memory a valid reason to stop services?
What is the attack surface?
Community Votes
100% of anonymous learners picked answer B. Votes are pick records left by other test-takers — they are not the verified answer.
Discussion 4 contributions
Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.
From public community threads 4
-
JustAName 👍 2B, while A is correct as well, but we are suppose to think from a cyber security specialist's perspective. Therefore B is the most accurate answer in this case.
-
insaniunt 👍 2 Answered BB. Unnecessary services could contain vulnerabilities; minimize the attack surface.
-
prasoonmk 👍 1B. Unnecessary services could contain vulnerabilities; minimize the attack surface. Minimizing the number of services running on a web server is a crucial step in securing the system against potential cyber-attacks. Unnecessary services could contain vulnerabilities that might be exploited by attackers to gain unauthorized access or cause disruption. Thus, the primary response to the question at hand is that by limiting these services, we effectively reduce the server's attack surface. This enhances the overall performance and stability of the server environment in addition to helping to block possible entry points for bad actors. Considering the continuous evolution of cyber threats, up-to-date security infrastructure is mandatory, further stressing the necessity to reduce unnecessary services.
-
LordXander 👍 1 Answered BIs B, the answer is literally in your face :))
Reader comments & corrections
No reader corrections yet — spotted an error or have a note? Share it below.