An organization has hired a penetration tester to test the security of its ten web servers. The penetration tester is able to gain root/administrative access in several servers by exploiting vulnerabilities associated with the implementation of SMTP, POP, DNS, FTP, Telnet, and IMAP. Which of the following recommendations should the penetration tester provide to the organization to better protect their web servers in the future?

Question

Quizplus · Accepted Answer

Disabling unnecessary services reduces the attack surface by ensuring that only essential services are running, minimizing the risk of exploitation through vulnerabilities in unused services.

An Organization Has Hired a Penetration Tester to Test the Security