66. An administrator needs to perform server hardening before deployment. Which of the following steps should the administrator take? (Select two).
Answer: A,C
Disable default accounts and remove unnecessary services.
To effectively harden a server before deployment, an administrator should disable default accounts and remove unnecessary services. Both actions significantly reduce potential vulnerabilities that could be exploited by attackers.
A) Disable default accounts.
Disabling default accounts is a critical step in server hardening as these accounts often have known credentials, making them prime targets for unauthorized access. By disabling them, the administrator minimizes the attack surface and enhances the security posture of the server.
B) Add the server to the asset inventory.
While adding the server to the asset inventory is important for tracking and management, it does not directly contribute to hardening the server. This step is more related to asset management rather than mitigating security risks.
C) Remove unnecessary services.
Removing unnecessary services is essential for server hardening because each running service can present a potential vulnerability. By eliminating these services, the administrator reduces the potential entry points for attackers, thereby strengthening the server's defenses.
D) Document default passwords.
Documenting default passwords does not enhance security; rather, it may create a risk if those documents are not securely managed. Instead of focusing on documentation, efforts should be directed towards eliminating or securing those passwords through hardening practices.
E) Send server logs to the SIEM.
Sending server logs to a Security Information and Event Management (SIEM) system is beneficial for monitoring and incident response, but it does not directly contribute to the hardening process. This step is more about ongoing security management rather than initial hardening measures.
F) Join the server to the corporate domain.
Joining the server to the corporate domain aids in centralizing management and enforcing policies, but it does not directly affect the hardening of the server itself. The focus should remain on actions that minimize vulnerabilities prior to deployment.
Conclusion
Disabling default accounts and removing unnecessary services are the most effective steps for hardening a server before deployment, as they directly address potential vulnerabilities. Other options, while relevant for overall security management, do not specifically contribute to the hardening process, which is crucial for protecting the server from threats.