Which of the following would reduce the attack surface added by the service and account?

A systems administrator is installing and configuring an application service that requires access to read and write to log and configuration files on a local hard disk partition. The service must run as an account with authorization to interact with the file system.

Which of the following would reduce the attack surface added by the service and account? (Select TWO)
A . Use a unique managed service account
B . Utilize a generic password for authenticating
C . Enable and review account audit logs
D . Enforce least possible privileges for the account
E . Add the account to the local administrator’s group.
F . Use a guest account placed in a non-privileged users’ group

View Answer

Answer: A,D