AhaBulbStuff Everyone Should Know
AhaBulb: Stuff Everyone Should Know · ahabulb.com/secplus-harden-remove-unneeded-services

What does NIST say to do first about services and protocols when hardening a new server's OS?

Start playing free

  1. Leave them all on in case they are needed later
  2. Remove or disable the ones that are not required
  3. Add sample content to test each one

🔒 The answer is for AhaBulb members. Members see the answer, why it's right and the official sources for every card of Stuff Every Security Pro Should Know, plus timed practice exams.

The first 50 cards of every test are free to play.

Play the free cards See membership

Like this card?
Play the game

References

  1. NIST SP 800-123, Guide to General Server Security nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-123.pdf Checked 2026-10-10.
  2. NIST SP 800-123, Guide to General Server Security nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-123.pdf Checked 2026-10-10.

Think this answer is wrong? Tap "Challenge this answer" on the card in the game and tell us why.

Test yourself in the game

Security & PrivacyWhich hardening step reduces the attack surface by removing what a system does not need?Security & PrivacyWhat can an intrusion prevention system (IPS) do that a plain intrusion detection system (IDS) cannot?Security & PrivacyWhich NIST media sanitization method also leaves the media unusable for storing data afterward?

That's stuff everyone should know.