다음 관리 프로세스 중 사용자가 작업을 수행하고 기본 사용자 암호를 변경하고 바이러스 백신 업데이트를 검색하도록 서버를 설정하는 데 필요한 서비스만 허용하는 것은 무엇입니까?
정답: A
The management process that allows only those services required for users to accomplish their tasks, change default user passwords, and set servers to retrieve antivirus updates is configuration. Configuration is the process of setting and adjusting the parameters and options of a system or a network, such as hardware, software, or services, to meet the requirements and objectives of the organization. Configuration can provide some benefits for security, such as enhancing the performance and the functionality of the system or the network, preventing or mitigating some types of attacks or vulnerabilities, and supporting the audit and compliance activities. Configuration can involve various techniques and tools, such as configuration management, configuration control, configuration auditing, or configuration baselines.
Configuration can allow only those services required for users to accomplish their tasks, change default user passwords, and set servers to retrieve antivirus updates, by using the following methods:
Enabling or disabling the services that are necessary or unnecessary for the system or the network, such as file sharing, remote access, or printing. This can help to reduce the attack surface and the exposure of the system or the network, as well as to optimize the resource utilization and the bandwidth consumption.
Changing the default user passwords that are provided by the vendors or the manufacturers of the system or the network, such as routers, switches, or servers. This can help to prevent or mitigate some types of attacks or unauthorized access, such as brute force, dictionary, or credential stuffing, by using strong and unique passwords that are difficult to guess or crack.
Setting the servers to retrieve antivirus updates automatically or periodically from the trusted sources, such as the antivirus vendors or the security providers. This can help to protect the system or the network from malware infections or exploits, by updating and applying the latest malware signatures, heuristics, or behavioral analysis to the system or the network.
