Study. uk . com
  1. Home
  2. All questions
  3. Question 569

CISM study material · question 569 of 1000

Which two elements does the least functionality control require? Choose two.

  1. Disabling all logging on the host in order to reduce its attack surface
  2. Maintaining a defined list of prohibited or restricted functions, ports, protocols and services
  3. Removing every one of the administrative accounts from the system entirely first
  4. Configuring the system to provide only essential capabilities
Show the answer

Answer: D. Configuring the system to provide only essential capabilities
B. Maintaining a defined list of prohibited or restricted functions, ports, protocols and services

The least functionality control requires configuring the system to provide only essential capabilities and specifically prohibiting or restricting an organisation-defined list of functions, ports, protocols and services.

Source: NIST SP 800-100 (NIST) — Table 14-1 CM Control Family

Challenge yourself on this topic → Study as cards