Which of the following security practices is MOST effective in reducing system risk through system...

System hardening involvesdisabling unnecessary features and enabling only required capabilitiesto reduce the attack surface:

Minimizing Attack Vectors:Reduces potential entry points by disabling unused services and ports.

Configuration Management:Ensures only essential features are active, reducing system complexity.

Best Practice:Hardening is part of secure system configuration management to mitigate vulnerabilities.

Incorrect Options:

A. Multiple users completing a task:More related to separation of duties, not hardening.

B. Permitting only required access:Relevant for access control but not directly for system hardening.

C. Giving users only necessary permissions:Reduces privilege risks but does not reduce the system attack surface.

Exact Extract from CCOA Official Review Manual, 1st Edition:

Refer to Chapter 4, Section "System Hardening Techniques," Subsection "Minimal Configuration" - Hardening involves enabling only necessary system functions to reduce risks.