CCSP: Certified Cloud Security Professional

Unnecessary installed services and utilities should be removed to minimize the attack surface and eliminate components that could be misconfigured, exploited, or require ongoing maintenance. Disabling is appropriate only when removal is not feasible. NIST server-security guidance states that unnecessary installed applications, services, and scripts should be removed after installation.