CISSP: Certified Information Systems Security Professional

By ISC · Question Mode

QuestionQ7

VerifiedSecurity Operations

A web developer is finalizing a security checklist for a new web application before deploying the application to production. Disabling unneeded services is included on the checklist. Which web application threat does this action mitigate?

Explanation

Unnecessary enabled services create avoidable attack surface and indicate inadequate security hardening, which is a security misconfiguration. OWASP identifies unnecessary ports, services, pages, accounts, and privileges as examples of this category.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!