Module-10 Hardening

What is the primary advantage of the least functionality principle in system hardening?

• Reducing system resource consumption

• Increasing the system's processing speed

• Minimizing the system's attack surface

• Enhancing user experience

When configuring a baseline image for system deployment, which factor is most critical for security?

• Including the latest software versions

• Installing all available applications

• Only including necessary and secure applications

• Maximizing the system's performance

Why might an organization prefer blacklisting over whitelisting in application management?

• Blacklisting requires more frequent updates

• Blacklisting is easier to manage and implement

• Whitelisting allows unknown applications to run

• Blacklisting is more secure than whitelisting

Which of the following best describes the impact of uninstalling unused applications on a system?

• 1. A) It improves the user interface of the system

• 1. B) It increases the number of services running

• 1. C) It decreases the number of potential vulnerabilities

• 1. It complicates system updates and patches

How does disabling unnecessary services contribute to system security?

• 1. A) It reduces system performance by limiting functionality

• 1. B) It increases the attack surface by restricting necessary services

• 1. C) It closes potential attack vectors by limiting services running

• 1. D) It makes the system more vulnerable to malware

Which challenge is associated with maintaining whitelists in a dynamic environment?

• Lack of support for software updates

• Difficulty in managing a large number of applications

• Increased risk of malware infections

• High resource consumption on the system

In the context of system hardening, what is the most significant risk of using blacklists?

• Blacklists are difficult to manage

• New malicious programs may bypass the blacklist

• Blacklists are more secure than whitelists

• They are too resource-intensive

What role does patch management play in system hardening?

• 1. A) It prevents the installation of unnecessary applications

• 1. B) It ensures that all software remains up-to-date and secure

• 1. C) It restricts user access to certain applications

• 1. D) It optimizes system performance by removing patches

Which of the following is a key benefit of using a trusted OS in a hardening strategy?

• It automatically installs all available updates

• It provides built-in security features that reduce vulnerabilities

• It increases the system's resource requirements

• It simplifies the management of user accounts

How can group policies contribute to a hardening strategy in an enterprise environment?

• By allowing users to install any software they prefer

• By providing centralized control over system configurations

• By reducing the need for regular updates

• By automatically disabling all unnecessary services