SESK: Stuff Everyone Should Know · sesk.info/secplus-disable-unneeded-services
Which hardening step reduces the attack surface by removing what a system does not need?
Disable unnecessary services, because unused features are unwatched doors.
- Enabling every available service
- Sharing admin passwords across servers
- Disabling unnecessary services, ports and protocols ✔
Why: Every running service is a possible vulnerability. Turning off unneeded services, applications and protocols leaves fewer ways in.
Huh, didn't know that: NIST SP 800-123's server hardening steps start with patching, then removing or disabling unnecessary services, applications and network protocols.
An open port is like a window left unlocked. Close the ones you are not using.
Like this card?
References
Answer: Disabling unnecessary services, ports and protocols. Every running service is a possible vulnerability. Turning off unneeded services, applications and protocols leaves fewer ways in.
- NIST SP 800-53 Rev. 5, Security and Privacy Controls nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-53r5.pdf
Prohibit or restrict the use of the following functions, ports, protocols, software, and/or services
Checked 2026-10-10. - NIST SP 800-123, Guide to General Server Security nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-123.pdf
Remove or disable unnecessary services, applications, and network protocols
Checked 2026-10-10.
Think this answer is wrong? Tap "Challenge this answer" on the card in the game and tell us why.
More stuff everyone should know
Security & PrivacyGiving each user only the access needed for their assigned tasks follows which principle?Security & PrivacyA list of applications authorized to run, with everything else blocked by default, is called what?Security & PrivacyWhich control limits how many failed login attempts can be made on an account?
That's stuff everyone should know.