Certified Cloud Security Professional – CCSP – Question052

What is the best approach for dealing with services or utilities that are installed on a system but not needed to perform their desired function?

A.
Remove
B. Monitor
C. Disable
D. Stop

Correct Answer: A

Explanation:

Explanation: The best practice is to totally remove any unneeded services and utilities on a system to prevent any chance of compromise or use. If they are just disabled, it is possible for them to be inadvertently started again at any point, or another exploit could be used to start them again. Removing also negates the need to patch and maintain them going forward.