Which of the options below will do the most to reduce an organization’s attack surface on the internet?

Which of the options below will do the most to reduce an organization’s attack surface on the internet?
A . Deploy an access control list on the perimeter router and limit inbound ICMP messages to echo requests only
B . Deploy antivirus software on internet-facing hosts, and ensure that the signatures are updated regularly
C . Ensure that rotation of duties is used with employees in order to compartmentalize the most important tasks
D . Ensure only necessary services are running on Internet-facing hosts, and that they are hardened according to best practices

View Answer

Answer: D