Question $2$

$5$ pts

Many IT security guides recommending turning off unnecessary services and$/$or closing ports that are not in use. What concept is this?

Defense in depth

Threat modeling

Attack surface reduction

Vulnerability scanning