Systems and Application Security →mediumMultiple SelectObjective-mapped

SSCP Systems and Application Security Practice Question

An organization is hardening a Linux server. Which TWO of the following are effective steps to reduce the attack surface?

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

Remove unnecessary services and software packages

Removing unnecessary services and software reduces potential vulnerabilities. Proper file permissions using chmod and chown enforce least privilege.

Answer analysis

For each option: why learners choose it and why it is or isn't the right answer here.

✗
Disable SELinux for better performance
Why it's wrong here
Disabling SELinux reduces security controls; it should be enabled.
✗
Install all available packages to ensure compatibility
Why it's wrong here
Installing unnecessary packages increases the attack surface.
✓
Remove unnecessary services and software packages
Why this is correct
This reduces the number of potential vulnerabilities.
✓
Set file permissions using chmod and chown to restrict access
Why this is correct
Proper permissions prevent unauthorized access to sensitive files.
✗
Enable the root account for direct login
Why it's wrong here
Direct root login is discouraged; sudo should be used instead.

Go deeper