Free CompTIA CloudNetX CNX-001 Actual Exam Questions - Question 1 Discussion
HOTSPOT New devices were deployed on a network and need to be hardened. INSTRUCTIONS Use the drop-down menus to define the appliance-hardening techniques that provide the most secure solution. If at any time you would like to bring back the initial state of the simulation, please click the Reset All button. 
D and B make sense since logging tracks issues and disabling unused services cuts risks.
Disabling unused services definitely lowers risk by shutting down possible exploits. Pairing that with enabling logging makes sense to catch any weird activity early on. Firmware updates could be tricky depending on policies.
I'd pick disabling unused services first since it cuts down possible entry points immediately. Enabling logging is crucial too; you want to monitor for anything suspicious as soon as possible after deployment.
I’d say disabling unused services (A) is the best first step since it reduces attack surface immediately. Enabling logging (B) helps spot issues fast. Firmware updates can be good but might not always be allowed right away.
Disabling unused services is key since it narrows down what attackers can exploit, and enabling logging keeps track of what’s happening, so you catch issues fast. Firmware updates add security but can be tricky right after deployment.
Disabling unused services and enabling logging cover both prevention and detection effectively.
Disabling unused services is a quick win since it limits attack vectors. Beyond that, enabling logging can help detect suspicious activity early, which adds another layer of security without much hassle.
I’m thinking changing default passwords is critical since a lot of breaches start there. Also, disabling unused services cuts down the attack surface a lot. Firmware updates are great but sometimes not immediately possible depending on the device and environment. So focusing on passwords and services feels like the safest bet to lock things down quickly.
Haven't seen this exact one, but I’d go with disabling unused services first.