Question 6

Disable the unused ports.

Disabling the unused ports is a vital step in hardening the security of the web server. This action minimizes the attack surface by ensuring that only necessary services are accessible, thereby reducing the risk of unauthorized access and potential exploitation.

A) Disable the unused ports.

This option is correct as it directly addresses the need to reduce vulnerabilities on the web server. By disabling ports that are not in use, the network administrator can prevent unauthorized access attempts and limit the potential for exploitation of services that are not actively required for the server's function.

B) Enforce access control lists.

While enforcing access control lists (ACLs) is an important security measure, it does not specifically address the immediate concern of unused ports. ACLs can help manage which devices can connect to the server and what services they can access, but if unused ports remain open, they can still pose a risk.

C) Perform content filtering.

Content filtering is primarily focused on controlling the type of data that can be sent or received by the web server. Although it contributes to web security, it does not mitigate the risks associated with open and unused ports, making it less effective in this context.

D) Set up a screened subnet.

Setting up a screened subnet is a more advanced security configuration that can enhance overall network security. However, it does not directly address the specific issue of unused ports on the web server. This option is more about network architecture than immediate action to secure the server itself.

Conclusion

Disabling unused ports is clearly the most effective approach for hardening the web server's security, as it directly reduces vulnerabilities. Other options, while beneficial in broader security strategies, do not specifically target the issue of open ports. Therefore, option A stands out as the most relevant and practical action for the network administrator to take.