TechKnowSurge
CompTIA Security+ 2.5
TechKnowSurge Catalog Interactives What Do You Remove to Shrink the Attack Surface?
InteractiveSecurityFree

What Do You Remove to Shrink the Attack Surface?

Unneeded apps, unused services, or open ports? Sort each thing you take away to shrink a device's attack surface.

⚑ Complete this interactive to capture a CTF flag worth 5 points.

About this interactive

Every program installed, every service running and every open port is a way an attacker might get in, so part of hardening is taking away what is not needed. The lesson splits this into three. Remove unnecessary software: the applications a device shipped with or that were installed for a one-off task. A vulnerable or simply unused app widens the attack surface, and the lesson often just reimages the machine to clear the lot. Disable unused services: services are software running in the background, and each can have holes, so turn off any the machine does not use. Close unused ports and protocols: an open port with nothing behind it, or a protocol nothing speaks, is an open hole to shut. To sort a card, ask whether what is being removed is an installed application, a running service, or an open port or protocol.

What you'll learn

Aligned to

CompTIA Security+
2.5 Explain the purpose of mitigation techniques used to secure the enterprise.

Key terms

Attack Surface
The total set of points in a system where an unauthorized user can attempt to enter or extract data.
Least Functionality
A security principle that requires systems to be configured with only the essential capabilities needed to perform their intended function, reducing exposure to potential threats.
Bloatware
Unnecessary pre-installed or feature-bloated software that consumes excessive storage, processing power, and bandwidth, degrading overall system performance.
Reimaging
The process of wiping a compromised system and reinstalling the operating system and software from a clean image to ensure complete removal of threats.

Topics

Interactive Categorize

About TechKnowSurge

TechKnowSurge builds IT and cybersecurity professionals through hands-on, concept-first training built around real understanding — not memorization. Free interactive tools, structured programs, and 25+ years of real-world experience, all in one place.

Explore free tools and programs →