3 Hardening Systems and Networks Free Online FlashCards

What is system and network hardening?

Hardening deliberately reduces the ways an attacker could gain access, increase privileges, move through a network, or disrupt operations.

What is a secure configuration baseline?

An approved, documented set of specifications describing a system’s expected secure state at a particular point in time.

How does removing unnecessary components reduce exposure?

Remove or disable software, features, accounts, services, interfaces, and ports that the system’s intended role does not require.

What does least privilege require?

Give users, administrators, and services only the permissions needed for their tasks; avoid broad privileges by default.

How should administrative access be secured?

Require strong authentication, use multifactor authentication where supported, and restrict management interfaces to trusted networks or designated systems.

What is the hardening purpose of a host firewall?

Configure host firewalls to allow only the inbound and outbound traffic the system requires.

What does network segmentation do?

Separate systems by function or sensitivity and restrict unnecessary communication between network zones.

How should an organization choose configuration guidance?

Match the product, version, system role, and operational context; test recommended settings before broad deployment.

What information should a baseline specify?

A baseline should document its scope, required settings, rationale and impact, verification method, ownership and review, and exception process.

How should a necessary baseline deviation be handled?

Document the deviation, assess its risk, apply compensating safeguards where feasible, and obtain approval through the change process.

What should hardening tests check before broad deployment?

Apply proposed changes in a test or pilot environment and check functionality, security effects, and recovery procedures before wider deployment.

Why verify both local configuration and network reachability?

Check both the system’s local settings and the services reachable over the network; a correct local setting alone does not prove network rules are correct.