Why OS hardening reduces attack surface in Cybersecurity - Quick Recap

Recall & Review

beginner

What is OS hardening?

OS hardening is the process of securing an operating system by reducing its vulnerabilities. This includes removing unnecessary software, closing unused ports, and applying security patches.

beginner

What does 'attack surface' mean in cybersecurity?

Attack surface refers to all the points where an unauthorized user can try to enter or extract data from a system. The larger the attack surface, the more opportunities for attacks.

beginner

How does removing unnecessary software help in OS hardening?

Removing unnecessary software reduces the number of programs that could have security weaknesses, thus lowering the chances attackers can exploit them.

beginner

Why is closing unused network ports important in OS hardening?

Closing unused ports stops attackers from accessing services that are not needed, which reduces entry points for attacks.

beginner

How do security patches contribute to reducing the attack surface?

Security patches fix known vulnerabilities in the OS, preventing attackers from exploiting those weaknesses.

What is the main goal of OS hardening?

A To make the OS run faster

B To add more software for functionality

C To increase network ports for better access

D To reduce the attack surface by securing the OS

OS hardening aims to reduce vulnerabilities and entry points for attackers, thus reducing the attack surface.

Which of the following helps reduce the attack surface?

A Installing all available software

B Leaving unused ports open

C Applying security patches regularly

D Ignoring system updates

Applying security patches fixes vulnerabilities, reducing the attack surface.

What happens if unused software is left on the OS?

A It increases the attack surface

B It decreases the attack surface

C It has no effect on security

D It speeds up the OS

Unused software can have vulnerabilities that attackers might exploit, increasing the attack surface.

Why should unused network ports be closed?

A To reduce entry points for attackers

B To allow more users to connect

C To improve internet speed

D To increase system memory

Closing unused ports reduces the number of ways attackers can access the system.

Which action is NOT part of OS hardening?

A Removing unnecessary services

B Opening all firewall ports

C Applying security updates

D Disabling unused user accounts

Opening all firewall ports increases the attack surface and is not part of OS hardening.

Explain how OS hardening reduces the attack surface.

Think about what makes a system safer by limiting ways attackers can get in.

List common steps involved in OS hardening and why each step helps reduce the attack surface.

Consider how each step limits opportunities for attackers.