350-201 Question 55
Select 3You are tasked with deploying a machine image for a new web application in your organization's cloud infrastructure. To ensure security, you must use a hardened machine image as part of the deployment process. Which of the following steps are essential to hardening the machine image before deployment?
- A
Remove unnecessary software and services from the base image.
- B
Use default administrative credentials for simplicity during deployment.
- C
Apply the latest security patches and updates to the machine image.
- D
Disable unused network ports and protocols.
- E
Enable a guest account to allow easier troubleshooting post-deployment.
Show answer and explanation
Correct answers: A, C, D
Explanation
Hardening a machine image is a critical step in securing cloud deployments. This involves removing unnecessary components, applying updates to address vulnerabilities, and disabling unused ports or protocols to reduce the attack surface. Ensuring strong credentials and avoiding insecure practices, such as enabling unnecessary accounts, are also key to maintaining security.
- A. Correct.
Removing unnecessary software and services reduces the attack surface of the machine image, making it more secure.
- B. Incorrect.
Using default administrative credentials is a security risk, as these are often well-known and could lead to unauthorized access.
- C. Correct.
Applying the latest security patches and updates ensures that any known vulnerabilities are addressed prior to deployment.
- D. Correct.
Disabling unused network ports and protocols minimizes potential entry points for attackers, enhancing security.
- E. Incorrect.
Enabling a guest account can expose the system to unauthorized access and is not a recommended security practice.