Restricting Services on Web Servers
You have been given the responsibility to ensure the security of your school's web server. As a step towards this, you plan to restrict unnecessary services running on the server. In the context of web server security, why is this step considered important?
Community Votes
100% of anonymous learners picked answer B. Votes are pick records left by other test-takers — they are not the verified answer.
Community Insight
The exam tests the understanding of 'minimizing the attack surface' as the primary security rationale for service reduction, distinguishing it from performance or resource optimization concerns.
This question addresses the critical practice of minimizing services on a web server to reduce potential entry points for attackers. It establishes that limiting running services is primarily done to minimize the attack surface by removing unnecessary vulnerabilities.
Learners often select option A (saving memory) or D (optimizing speed), focusing on operational efficiency rather than the security imperative of reducing exploitable vulnerabilities.
Community Discussion (4 comments)
Comments & Corrections
No comments yet — spotted an error or have a note? Share it below.
Expert Analysis
Why the Answer Is Correct
Option B is correct because every active service represents a potential vector for exploitation. By restricting unnecessary services, you directly reduce the number of open ports and applications that could contain unpatched vulnerabilities, thereby minimizing the overall attack surface.Why the Other Options Are Wrong
Options A and D focus on performance and resource management, which are secondary benefits but not the primary security motivation. Option C refers to information hiding, which is a defense-in-depth tactic but less critical than removing vulnerable code paths entirely.Community Comment Notes
The community overwhelmingly agrees with B, noting that while saving memory is true, the security perspective prioritizes vulnerability reduction. As one user noted, "we are suppose to think from a cyber security specialist's perspective," highlighting the need to prioritize risk over resources.Exam Strategy
Always prioritize security outcomes over operational efficiency when answering questions about hardening systems. Look for keywords like 'attack surface', 'vulnerability', and 'risk' to guide your selection.
Frequently Asked Questions
Is saving memory a valid reason to stop services?
Yes, it is a benefit, but in security exams, minimizing the attack surface is the primary goal.
What is the attack surface?
It is the sum of all points where an attacker can try to enter data or extract data from an environment.