Which of the following security practices is MOST effective in reducing system risk through system hardening?

System hardening involves disabling unnecessary features and enabling only required capabilities to

reduce the attack surface:

Minimizing Attack Vectors: Reduces potential entry points by disabling unused services and ports.

Configuration Management: Ensures only essential features are active, reducing system complexity.

Best Practice: Hardening is part of secure system configuration management to mitigate

vulnerabilities.

Incorrect Options:

A . Multiple users completing a task: More related to separation of duties, not hardening.

B . Permitting only required access: Relevant for access control but not directly for system hardening.

C . Giving users only necessary permissions: Reduces privilege risks but does not reduce the system

attack surface.

Exact Extract from CCOA Official Review Manual, 1st Edition:

Refer to Chapter 4, Section "System Hardening Techniques," Subsection "Minimal Configuration" -

Hardening involves enabling only necessary system functions to reduce risks.