CompTIA Security+ SY0-701 Practice Question

The concept of 'Threat Scope Reduction' involves implementing measures to minimize the number of potential threats to an information system. This could mean reducing the attack surface by closing unnecessary ports, limiting the functionality and access rights to only what is strictly needed, and segmenting the network to limit potential lateral movement by an attacker. The idea is to reduce the number of vectors or paths an attacker can exploit, thus minimizing the overall potential for a security breach.