StudyToCert

All certifications / Security+ / Lessons

CompTIA Security+ SY0-701 · Domain 2: Threats, vulnerabilities & mitigations

Hardening: disable ports/services, change defaults, remove unused software

▶ Watch the overview video

Last reviewed September 25, 2026 · Leer en español

Hardening is the process of reducing a system's attack surface by removing or disabling everything it does not need and securing what remains. Systems usually ship with convenience in mind: many services enabled, default accounts and passwords, sample files and extra software. Each of those is a potential entry point. Hardening applies to servers, workstations, network devices, mobile devices, cloud resources, databases and embedded or IoT devices, and Security+ expects you to know the common steps and why each one matters.

Free account

Keep reading for free

Create a free StudyToCert account to read the rest of this lesson: 7 more sections, 7 key terms, a real-world example, an exam tip and self-check questions. Every lesson, lab and practice test is free with an account.

Sign up free Log in

Study Security+ for free
A week-by-week plan with every lesson, quizzes, checkpoint tests, a practice exam and hands-on labs.
Open the Security+ study plan