Module 4 - 03-1

Question 2

Define Security hardening

Answer 2

The process of strengthening a system to reduce its vulnerability and attack surface

Question 3

Define Attack surface

Answer 3

All the potential vulnerabilities that a threat actor could exploit

Let’s use an example that compares a network to a house. The attack surface would be all the doors and windows that a robber could use to gain access to that house. Just like putting locks on all the doors and windows in the house, security hardening involves minimizing the attack surface or potential vulnerabilities and keeping a network as secure as possible.

Question 4

What devices or systems can Security hardening be conducted on (5)?

Answer 4

• Hardware
• Operating systems
• Applications
• Computer networks
• Databases

Question 5

What are examples of hardening procedures?

Answer 5

• Software updates, also called Patches
• Device or application configuration changes
• Security configuration change - example - requiring longer passwords or more frequent password changes
• Configuration check - example - updating the encryption standards for data that is stored in a database
• Removing or disabling unused applications and services
• Disabling unused ports
• Reducing access permissions across devices and network

Question 6

What is another name for Software updates?

Answer 6

Patches

Question 7

Define Penetration test

Answer 7

A simulated attack that helps identify vulnerabilities in a system, network, website, application, and process

Question 8

What is another name for Penetration test?

Answer 8

Pen test

Question 9

____ refers to all the potential vulnerabilities a threat actor could potentially exploit in a system.

• Penetration testing
• Configuration testing
• Attack surface
• Security hardening

Answer 9

Attack surface

An attack surface is all the potential vulnerabilities a threat actor could potentially exploit in a system.