Study. uk . com
  1. Home
  2. All questions
  3. Question 595

CompTIA Security+ study material · question 595 of 611

How does reducing the attack surface differ from hardening what remains?

  1. They are the same activity described differently
  2. Reduction removes what an adversary could interact with; hardening strengthens what stays
  3. Reduction applies only to network services
  4. Hardening always precedes reduction
Show the answer

Answer: B. Reduction removes what an adversary could interact with; hardening strengthens what stays

Removing a capability means future flaws in it cannot apply; hardening still leaves the capability present.

Source: NIST SP 800-40 Rev. 4 (NIST) — SP 800-40 Rev. 4 § 2.1 Risk Responses

Challenge yourself on this topic → Study as cards