Which action reduces the attack surface of system components?

Which action reduces the attack surface of system components?

• A. Removing all unnecessary functionality, such as scripts and extra web servers
• B. Enabling all possible features
• C. Keeping default subsystems
• D. Installing extra drivers

Answer: (A)

Reducing attack surface means limiting the ways someone could break into a system by removing components that aren’t needed. When you eliminate unnecessary functionality, such as unused scripts and extra web servers, you shrink the number of entry points and the amount of code that could contain vulnerabilities. This makes it harder for an attacker to find a path in. The other options would expand or preserve exposure. Enabling every feature broadens the attack surface because more capabilities mean more potential bugs, misconfigurations, and exploitable paths. Keeping default subsystems often leaves components active that aren’t required, which adds unnecessary risks. Installing extra drivers introduces additional code that runs with high privileges and can have vulnerabilities, increasing the avenues an attacker could exploit.

Reducing attack surface means limiting the ways someone could break into a system by removing components that aren’t needed. When you eliminate unnecessary functionality, such as unused scripts and extra web servers, you shrink the number of entry points and the amount of code that could contain vulnerabilities. This makes it harder for an attacker to find a path in.

The other options would expand or preserve exposure. Enabling every feature broadens the attack surface because more capabilities mean more potential bugs, misconfigurations, and exploitable paths. Keeping default subsystems often leaves components active that aren’t required, which adds unnecessary risks. Installing extra drivers introduces additional code that runs with high privileges and can have vulnerabilities, increasing the avenues an attacker could exploit.