ISC Exam Questions

Removing unnecessary processes, segregating inter-process communications, and reducing executing pri

Removing unnecessary processes, segregating inter-process communications, and reducing
executing privileges to increase system security is commonly called

A.
Hardening

B.
Segmenting

C.
Aggregating

D.
Kerneling

Explanation:
What is hardening? Naturally, there is more than one definition, but in general, one tightens control
using policies which affect authorization, authentication and permissions. Nothing happens by
default. You only give out permission after thinking about it, something like “deny all” to everyone,
then “allow” with justification. Shut off everything, then only turn on that which must be turned on.
It is not unlike locking every single door, window and access point in your house, then unlocking only
those that need to be. It is quite common for users to take all the defaults when their new system
gets turned on making for instant vulnerability. A major problem is trying to figure out where all
those details are that need to be turned off, without making the system unusable.