Disabling unnecessary services, restricting administrative access, and enabling auditing controls
on a server are forms of which of the following?

A.
Application patch management

B.
Cross-site scripting prevention

C.
Creating a security baseline

D.
System hardening

Explanation:
Hardening is the process of securing a system by reducing its surface of vulnerability. Reducing
the surface of vulnerability typically includes removing or disabling unnecessary functions and
features, removing or disabling unnecessary user accounts, disabling unnecessary protocols and
ports, and disabling unnecessary services.