350-201 Question 53
Select 3Your team is tasked with deploying a new web application using a pre-configured machine image. As part of the deployment process, you need to ensure the image meets hardening standards to minimize security risks. Which of the following steps are recommended to harden the machine image before deployment?
- A
Remove unnecessary software packages and services from the image.
- B
Ensure the image contains default credentials for faster deployment.
- C
Apply the latest security patches and updates to the image.
- D
Enable logging and monitoring configurations within the image.
- E
Disable firewall rules to streamline network connectivity.
Show answer and explanation
Correct answers: A, C, D
Explanation
Hardening machine images involves reducing the attack surface, ensuring the latest security patches are applied, and enabling configurations that enhance security, such as logging and monitoring. Steps like removing unnecessary software, applying updates, and configuring logging ensure the machine is secure before deployment, while actions like using default credentials or disabling firewall rules introduce significant risks and should be avoided.
- A. Correct.
Removing unnecessary software packages and services reduces the attack surface and minimizes potential vulnerabilities.
- B. Incorrect.
Using default credentials is a significant security risk, as these are often known to attackers and can be easily exploited.
- C. Correct.
Applying the latest security patches and updates ensures the image is protected from known vulnerabilities at the time of deployment.
- D. Correct.
Enabling logging and monitoring provides visibility into system activities and helps detect suspicious behavior after deployment.
- E. Incorrect.
Disabling firewall rules exposes the system to potential network-based attacks and is not a recommended practice when hardening machine images.